Threats Tagged 'cve-2026-76651'

A buffer overflow vulnerability exists in the embedded HTTP service of TP-Link TL-WR841N v14 when processing multipart/form-data requests. The vulnerability arises from insufficient validation of an attacker-controlled boundary parameter, which may allow a remote unauthenticated attacker to corrupt memory by overwriting data beyond an internal buffer. Exploitation could lead to modification or corruption of process memory and undefined application behavior. There is no evidence of arbitrary code execution, information disclosure, or denial-of-service demonstrated. The vulnerability has a CVSS 4.0 score of 5.3, indicating medium severity.

CVE-2026-76651 is a buffer overflow vulnerability in the embedded HTTP service of TP-Link TL-WR841N v14. It occurs when processing multipart/form-data requests due to insufficient validation of an attacker-controlled boundary parameter. This can lead to memory corruption by overwriting data beyond an internal buffer. While arbitrary code execution, information disclosure, and denial-of-service have not been demonstrated, the vulnerability may cause undefined application behavior.