CVE-2026-76650

Deferred Deferred - Pending Action

NULL Pointer Dereference in TP-Link TL-WR841N UPnP Service

Publication date: 2026-08-28

Last updated on: 2026-08-31

Assigner: TPLink

Description

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in a denial-of-service condition affecting UPnP discovery, state query, or related management functionality until the affected process is restarted or the device is rebooted.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-31

Generated

2026-09-18

AI Q&A

2026-08-29

EPSS Evaluated

2026-09-15

NVD

CVE-2026-76650

EUVD

EUVD-2026-67936

Affected Vendors & Products

Vendor	Product	Version / Range
tp-link	tl-wr841n	14

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a NULL pointer dereference in the TP-Link TL-WR841N v14 router's UPnP service. It occurs when processing specially crafted SOAP state variable query requests, which can cause the UPnP service process to terminate unexpectedly or become unstable.

Detection Guidance

This vulnerability can be detected by monitoring for unexpected termination or instability in the UPnP service on TP-Link TL-WR841N v14 devices. Check for crashes or unresponsive UPnP functionality during SOAP state variable query requests. No specific commands are provided in the context.

Impact Analysis

Exploitation may lead to a denial-of-service condition affecting UPnP discovery, state queries, or related management functions. This could disrupt network services until the process is restarted or the device is rebooted.

Compliance Impact

This vulnerability causes a denial-of-service condition in the UPnP service, disrupting discovery and state query functionality until the device is rebooted. Such instability may impact systems relying on UPnP for network device management, potentially affecting availability of services that handle sensitive data.

Mitigation Strategies

Disable the UPnP service on the affected TP-Link TL-WR841N v14 device to prevent exploitation. Restrict network access to the device's UPnP port if disabling is not feasible. Monitor for unusual activity and reboot the device if instability occurs.

Hi! I’m here to help you understand CVE-2026-76650. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70