Authenticated OS Command Injection in TP-Link TL-WR940N Router
CVE-2026-11410
8.5HIGH
What is CVE-2026-11410?
An authenticated vulnerability exists in the WAN configuration module of the TP-Link TL-WR940N v6 router, stemming from insufficient user input sanitization. This issue allows an attacker with administrative access to exploit the vulnerability and execute arbitrary system commands with elevated privileges, potentially compromising the device's security and functionality.
Affected Version(s)
TL-WR940N v6 0
References
CVSS V4
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Duong Ton Hoang Khang of Sacombank