CVE-2026-76651: CWE-120 Buffer Copy without Checking Size of Input in TP-Link System Inc. TL-WR841N v14
Description
CVE-2026-76651 is a buffer overflow vulnerability in the embedded HTTP service of TP-Link TL-WR841N v14. It occurs when processing multipart/form-data requests due to insufficient validation of an attacker-controlled boundary parameter. This can lead to memory corruption by overwriting data beyond an internal buffer. While arbitrary code execution, information disclosure, and denial-of-service have not been demonstrated, the vulnerability may cause undefined application behavior.
CVSS v4.0
Score 5.3medium
Affected software
TP-Link System Inc.
TL-WR841N v14
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves a buffer overflow in the embedded HTTP service of TP-Link TL-WR841N v14 routers. The flaw arises from improper validation of the boundary parameter in multipart/form-data HTTP requests, allowing a remote unauthenticated attacker to craft a request that overwrites memory beyond the allocated buffer. The impact is limited to potential memory corruption and undefined behavior; no confirmed exploits for code execution or denial-of-service are documented.
Potential Impact
Successful exploitation can corrupt process memory, potentially causing undefined application behavior. There is no evidence of arbitrary code execution, information disclosure, or denial-of-service resulting from this vulnerability.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- TPLink
- Date Reserved
- 2026-08-19T15:49:30.548Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9206c6acd9273b4963ced7
Added to database: 08/28/2026, 22:08:06 UTC
Last enriched: 09/07/2026, 15:27:44 UTC
Last updated: 10/11/2026, 06:48:18 UTC
Views: 67
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.