Skip to content
OpenAdvisories
High VA-26-119-02 2 CVEs

TP-Link WR841N Router multiple vulnerabilities

Published Apr 29, 2026 · Updated Apr 29, 2026

Vendor: TP-Link Systems Product: Archer AX53 v1.0 Product: Archer C20 v5 Product: Archer C20 v6.0 Product: TL-WR841N v13

Summary

Multiple TP-Link products (TP-Link Archer C20 V5, Archer C20 6.0, Archer AX53 v1.0 and TL-WR841N v13) are affected by multiple vulnerabilities. The most severe of these vulnerabilities could allow an adjacent, unauthenticated attacker to execute administrative commands.

Vulnerabilities 2

  • High 7.2
    CVE-2026-0834 Public exploit

    Logic Vulnerability on TP-Link Archer C20, Archer AX53 and TL-WR841N v13

    Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands including factory reset and device reboot without credentials. Attackers on the ad…

    TP-Link Systems Archer C20 v5 TL-WR841N v13 Archer C20 v6.0, Archer AX53 v1.0 Network devices
  • Medium 6.1
    CVE-2026-5039

    Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N

    TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if device is left in default configuration. A network-adjacent attacker can exploit…

    TP-Link Systems TL-WL841N v13 Network devices

Revision history

  1. #1.0.0

    Initial publication