CVE-2026-76649
Pre-Authentication NULL Pointer Dereference in UPnP SOAP Action Request Processing in TP-Link TL-WR841N
CVSS score
5.3
EPSS probability
%0.3
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.5
CVE-2026-22223
Command Injection Vulnerability on TP-Link Archer BE230 v1.2 and BE3600 v1
TS
Patch verifiedEPSS %1
8.5
CVE-2026-102294
Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration
TS
Patch verifiedEPSS %1
6.9
CVE-2026-81531
Unauthenticated Account Information Disclosure in Multiple Omada Controllers
TS
Patch verifiedEPSS %1
7.5
CVE-2026-102298
Insufficient Authorization and User Boundary Validation in Omada Controller MSP
TS
Patch verifiedEPSS %0
5.3
CVE-2026-76651
Pre-Authentication Multipart Boundary Buffer Overflow in HTTP Service in TP-Link TL-WR841N
TS
Patch verifiedEPSS %0
5.3
CVE-2026-76650
Pre-Authentication NULL Pointer Dereference in UPnP SOAP State Variable Query Processing in TP-Link TL-WR841N
TS
Patch verifiedEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-76649"