Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-9014 EUVD-2026-2745GHSA-fg67-2rcj-c4j8

Null Pointer Dereference Vulnerability on TL-WR841N

Published Jan 15, 2026 · Updated Jan 15, 2026 · Assigned by TPLink

Description

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation.  A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N v14: before 250908.

Affected products

VendorProductAffectedFixed
TP-Link Systems TL-WR841N v14 < 250908 250908

References