CVE-2026-3622: CWE-125 Out-of-bounds read in TP-Link Systems Inc. TL-WR841N v14
CVE-2026-3622 is a high-severity vulnerability in the UPnP component of TP-Link TL-WR841N v14 routers. It arises from improper input validation that causes an out-of-bounds read, potentially crashing the UPnP service. Exploitation leads to a denial-of-service condition by disrupting the UPnP functionality. This affects versions prior to EN_0. 9. 1 4. 19 Build 260303 Rel. 42399n and US_0. 9. 1.
AI Analysis
Technical Summary
The vulnerability CVE-2026-3622 affects the UPnP component of TP-Link TL-WR841N v14 routers. It is caused by improper input validation that results in an out-of-bounds read (CWE-125). This flaw can cause the UPnP service to crash, leading to a denial-of-service condition. The affected firmware versions are those earlier than EN_0.9.1 4.19 Build 260303 Rel.42399n and US_0.9.1.4.19 Build 260312 Rel. 49108n. The CVSS 4.0 base score is 7.1, indicating high severity, with attack vector being adjacent network and no privileges or user interaction required. There is no vendor advisory or patch link provided, and the product is not a cloud service.
Potential Impact
Successful exploitation causes the UPnP service on the affected router to crash, resulting in denial-of-service. This disrupts UPnP functionality but does not indicate further compromise or code execution based on the available data. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling UPnP on affected devices if feasible to mitigate the risk of service disruption. Monitor vendor communications for updates or patches addressing this vulnerability.
CVE-2026-3622: CWE-125 Out-of-bounds read in TP-Link Systems Inc. TL-WR841N v14
Description
CVE-2026-3622 is a high-severity vulnerability in the UPnP component of TP-Link TL-WR841N v14 routers. It arises from improper input validation that causes an out-of-bounds read, potentially crashing the UPnP service. Exploitation leads to a denial-of-service condition by disrupting the UPnP functionality. This affects versions prior to EN_0. 9. 1 4. 19 Build 260303 Rel. 42399n and US_0. 9. 1.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2026-3622 affects the UPnP component of TP-Link TL-WR841N v14 routers. It is caused by improper input validation that results in an out-of-bounds read (CWE-125). This flaw can cause the UPnP service to crash, leading to a denial-of-service condition. The affected firmware versions are those earlier than EN_0.9.1 4.19 Build 260303 Rel.42399n and US_0.9.1.4.19 Build 260312 Rel. 49108n. The CVSS 4.0 base score is 7.1, indicating high severity, with attack vector being adjacent network and no privileges or user interaction required. There is no vendor advisory or patch link provided, and the product is not a cloud service.
Potential Impact
Successful exploitation causes the UPnP service on the affected router to crash, resulting in denial-of-service. This disrupts UPnP functionality but does not indicate further compromise or code execution based on the available data. There are no known exploits in the wild.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling UPnP on affected devices if feasible to mitigate the risk of service disruption. Monitor vendor communications for updates or patches addressing this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- TPLink
- Date Reserved
- 2026-03-06T00:09:48.566Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 69c59e483c064ed76fcd549a
Added to database: 3/26/2026, 8:59:52 PM
Last enriched: 4/3/2026, 1:35:59 PM
Last updated: 5/10/2026, 8:58:00 AM
Views: 79
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.