CVE-2026-76650: CWE-476 NULL pointer dereference in TP-Link System Inc. TL-WR841N v14

This vulnerability involves a NULL pointer dereference in the UPnP service of TP-Link TL-WR841N v14 devices triggered by specially crafted SOAP state variable query requests. The flaw causes the process hosting the UPnP service to terminate or become unstable, leading to denial-of-service conditions that disrupt UPnP discovery and management functionality. The vulnerability does not require privileges or user interaction to exploit and has a medium impact score. No known exploits are reported in the wild, and no vendor-provided patch or mitigation details are currently available.

Successful exploitation causes denial-of-service by crashing or destabilizing the UPnP service process on affected devices. This disrupts UPnP discovery, state queries, and related management functions until the process is restarted or the device is rebooted. There is no indication of privilege escalation, data disclosure, or persistent compromise from this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, affected devices may require manual process restarts or reboots to restore UPnP functionality after exploitation. Network administrators may consider disabling UPnP services if not required to reduce exposure.