PT-2026-28636 · Tp Link · Tp-Link Tl-Wr841N Version 14

Published 2026-03-26 · Updated 2026-03-26 · CVE-2026-3622

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions TP-Link TL-WR841N version 14 versions prior to EN 0.9.1 4.19 Build 260303 Rel.42399n (V14 260303) TP-Link TL-WR841N version 14 versions prior to US 0.9.1.4.19 Build 260312 Rel. 49108n (V14 0304)

Description The issue resides within the UPnP component, where inadequate input validation can lead to an out-of-bounds read. This can potentially cause a crash of the UPnP service, resulting in a Denial-of-Service condition.

Recommendations Update TP-Link TL-WR841N version 14 to EN 0.9.1 4.19 Build 260303 Rel.42399n (V14 260303) or later. Update TP-Link TL-WR841N version 14 to US 0.9.1.4.19 Build 260312 Rel. 49108n (V14 0304) or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-3622

Affected Products

Tp-Link Tl-Wr841N Version 14

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-3622 · Security Note
• https://tp-link.com/us/support/faq/5033 · Vendor Advisory
• https://tp-link.com/en/support/download/tl-wr841n/v14/#Firmware · Patch
• https://tp-link.com/us/support/download/tl-wr841n/v14/#Firmware · Patch
• https://twitter.com/CVEnew/status/2037280533173117341 · Twitter Post