CVE-2026-76651: CWE-120 Buffer Copy without Checking Size of Input in TP-Link System Inc. TL-WR841N v14
Description
A buffer overflow vulnerability exists in the embedded HTTP service of TP-Link TL-WR841N v14 when processing multipart/form-data requests. The vulnerability arises from insufficient validation of an attacker-controlled boundary parameter, which may allow a remote unauthenticated attacker to corrupt memory by overwriting data beyond an internal buffer. Exploitation could lead to modification or corruption of process memory and undefined application behavior. There is no evidence of arbitrary code execution, information disclosure, or denial-of-service demonstrated. The vulnerability has a CVSS 4.0 score of 5.3, indicating medium severity.
CVSS v4.0
Score 5.3medium
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-76651 is a buffer overflow vulnerability (CWE-120) in the embedded HTTP service of TP-Link System Inc.'s TL-WR841N v14 router. It occurs due to improper validation of the boundary parameter in multipart/form-data HTTP requests, allowing an attacker to overwrite memory beyond the allocated buffer. This can corrupt process memory and cause undefined behavior in the application. The vulnerability is remotely exploitable without authentication. No confirmed exploits or evidence of code execution or information disclosure have been reported.
Potential Impact
Successful exploitation may result in modification or corruption of process memory, potentially causing undefined application behavior. However, there is no demonstrated impact of arbitrary code execution, information disclosure, or denial-of-service conditions.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, users should monitor vendor communications for updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-wqxh-m9g7-9pc2
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-76651"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 4.0
Threat ID: 6a92f7d9acd9273b49e75ac0
Added to database: 08/29/2026, 15:16:41 UTC
Last enriched: 09/09/2026, 21:23:04 UTC
Last updated: 10/13/2026, 18:48:23 UTC
Views: 35
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.