Improper Input Validation Vulnerability in TP-Link TL-WR940N V6
CVE-2025-11676

7.1HIGH

Key Information:

Vendor

Tp-link System Inc.

Status
Tl-wr940n V6
Vendor
CVE Published:
20 November 2025

What is CVE-2025-11676?

The TP-Link TL-WR940N V6 contains an improper input validation vulnerability in its UPnP modules. This flaw permits unauthenticated adjacent attackers to execute a Denial of Service (DoS) attack, potentially leading to service disruption. Users are advised to review the affected firmware versions and apply necessary updates.

Affected Version(s)

TL-WR940N V6 0

References

https://www.tp-link.com/us/support/download/tl-wr940n/v6/...
https://www.tp-link.com/en/support/download/tl-wr940n/v6/...
https://www.tp-link.com/en/support/faq/4755/

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-11676 : Improper Input Validation Vulnerability in TP-Link TL-WR940N V6