CVE-2026-5039 describes a vulnerability in TP-Link TL-WR841N v13 where the TDDPv2 debug protocol uses DES-CBC encryption with a cryptographic key derived from default web management credentials. Because these credentials are predictable when left unchanged, an attacker with network adjacency can exploit this to gain unauthorized access to the debug protocol. This access allows reading debug data, modifying certain device configurations, and triggering device reboot, resulting in integrity compromise and denial-of-service conditions. The CVSS 4.0 vector indicates low attack complexity, no privileges required, and no user interaction needed, with high impact on integrity and availability. No patch or official remediation level has been provided by TP-Link as of the publication date.

Exploitation of this vulnerability can lead to unauthorized access to debug data, unauthorized modification of device configuration, and forced device reboot causing denial-of-service. This results in loss of integrity and availability of the affected device. The attack requires network adjacency but no privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should change default web management credentials to strong, unique passwords to reduce the risk of exploitation. Monitoring for unusual device behavior may help detect attempts to exploit this vulnerability.