DES-CBC Encryption Vulnerability in TP-Link TL-WR841N Router

CVE-2026-5039

What is CVE-2026-5039?

The TP-Link TL-WR841N v13 utilizes DES-CBC encryption for its TDDPv2 debug protocol, employing a cryptographic key that stems from default web management credentials. This predictable key poses a significant threat when the device is left with its default configuration. An attacker located on the same network can exploit this vulnerability to gain unauthorized access to the debug protocol, allowing them to read sensitive debug data, modify critical device configurations, and even trigger reboots of the router. Such actions can lead to a compromise of device integrity and potential denial-of-service scenarios.

References