# CVE-2026-9105: TP-Link TL-WR841N stack overflow in web management interface

Source: https://junglewise.ai/threats/cve-2026-9105-tp-link-tl-wr841n-stack-overflow-in-web-management-interface  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-29. Updated: 2026-06-29  
License: CC BY 4.0 with a link back

CVE-2026-9105 · Severity: info · CVSS 6.8 · Published 2026-06-29

A security vulnerability exists in the web management interface of the TP-Link TL-WR841N wireless router. An authorized user with administrative access can send specifically crafted web requests that cause the device to crash and reboot. This results in a temporary loss of internet connectivity and network services for all connected users.

Technologies: [TP-Link TL-WR841N](https://junglewise.ai/threats/technologies/tl-wr841n). Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2026-9105 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-9105 being exploited in the wild.

**How severe is CVE-2026-9105?** Informational severity, with a CVSS score of 6.8, published 29 June 2026.

**Which products and versions are affected?** TP-Link TL-WR841N v14 (prior to firmware V14_260518).

**Is there a fix for CVE-2026-9105?** A patch was published on 2026-05-18: Based on fixed firmware version string V14_260518 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-9105 attacked?** It is attacked from the adjacent network, in a network appliance.

**Am I affected by CVE-2026-9105?** Check whether you run TP-Link TL-WR841N at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow (CWE-121) exists in the embedded web server of the TP-Link TL-WR841N v14. The vulnerability is triggered when the web management interface processes specifically crafted HTTP requests. An attacker must be authenticated with high privileges (PR:H) and have network access to the device's management interface (typically via the adjacent network). Successful exploitation causes the web server process to crash, leading to a full device reboot and a denial-of-service condition. TP-Link has released firmware version V14_260518 to address this issue.

## Affected products

- TP-Link TL-WR841N v14 (prior to firmware V14_260518)

## Timeline

- 2026-06-29: disclosed
- 2026-06-29: advisory
- 2026-05-18: patched: Based on fixed firmware version string V14_260518

## References

- [https://www.tp-link.com/en/support/download/tl-wr841n/v14/](https://www.tp-link.com/en/support/download/tl-wr841n/v14/)
- [https://www.tp-link.com/us/support/download/tl-wr841n/v14/](https://www.tp-link.com/us/support/download/tl-wr841n/v14/)
- [https://www.tp-link.com/us/support/faq/5152/](https://www.tp-link.com/us/support/faq/5152/)

## Related threats

- [TP-Link TL-WR841N OS command injection in IPv6 WAN configuration](https://junglewise.ai/threats/cve-2026-102294-tp-link-tl-wr841n-contains-an-authenticated-os-command-injection)
- [TP-Link TL-WR841N buffer overflow in HTTP service](https://junglewise.ai/threats/cve-2026-76651-tp-link-tl-wr841n-buffer-overflow-in-http-service)
- [TP-Link TL-WR841N v14 NULL pointer dereference in UPnP](https://junglewise.ai/threats/cve-2026-76650-tp-link-tl-wr841n-v14-null-pointer-dereference-in-upnp)
- [TP-Link TL-WR841N NULL pointer dereference in UPnP service](https://junglewise.ai/threats/cve-2026-76649-tp-link-tl-wr841n-null-pointer-dereference-in-upnp-service)
- [TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from…](https://junglewise.ai/threats/cve-2026-5039-tp-link-tl-wr841n-v13-uses-des-cbc-encryption-in-the-tddpv2-debug)