TP-Link WR841N Router multiple vulnerabilities
view advisory published 2026-04-29
Multiple TP-Link products (TP-Link Archer C20 V5, Archer C20 6.0, Archer AX53 v1.0 and TL-WR841N v13) are affected by multiple vulnerabilities. The most severe of these vulnerabilities could allow an adjacent, unauthenticated attacker to execute administrative commands.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-5039US | high8.8 | — | ||
TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if d… | ||||
| CVE-2026-0834US | high8.8 | Exploit | ||
Logic vulnerability in TP-Link Archer C20 v5, 6.0, Archer AX53 v1.0 and TL-WR841N v13 (TDDP module) allows unauthenticated adjacent attackers to execute administrative commands inc… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (5)
- FixedArcher AX53 v1.0
Fixed in V1_251215.
https://www.tp-link.com/us/support/faq/4905/ - FixedArcher C20 V5
Fixed in EU_V5_260317.
https://www.tp-link.com/us/support/faq/4905/ - FixedArcher C20 v6.0
Fixed in V6_251031.
https://www.tp-link.com/us/support/faq/4905/ - FixedTL-WR841N v13
Fixed in 0.9.1 Build 20231120 Rel.62366.
https://www.tp-link.com/us/support/faq/4905/ - FixedTL-WR841N v13
Fixed in 0.9.1 Build 20231120 Rel.62366.
https://www.tp-link.com/us/support/faq/4905/
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan