CVE-2026-11410 is an OS command injection vulnerability (CWE-78) affecting TP-Link Systems Inc. TL-WR940N v6. It arises from improper neutralization of special elements in user input within the BigPond Cable WAN configuration module. An attacker who has administrative privileges on the device can exploit this vulnerability to execute arbitrary system commands with elevated privileges. The vulnerability is authenticated and has a high impact on confidentiality, integrity, and availability as indicated by the CVSS vector. No vendor advisory or patch information is currently available.

An attacker with administrative access to the affected device can execute arbitrary system commands with elevated privileges, potentially leading to full compromise of the device. This can affect the confidentiality, integrity, and availability of the device and its network environment. Since the vulnerability requires administrative access, exploitation is limited to users who already have elevated privileges on the device.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, restrict administrative access to trusted users only and monitor for any suspicious activity related to WAN configuration changes. Avoid exposing the device management interface to untrusted networks.