Buffer Overflow Vulnerability in TL-WR841N v14 by TP-Link

CVE-2026-76651

What is CVE-2026-76651?

A buffer overflow vulnerability exists in the embedded HTTP service of the TL-WR841N v14 when handling multipart/form-data requests. The flaw arises from inadequate validation of an attacker-controlled boundary parameter, enabling a remote unauthenticated attacker to submit a malicious request. This may lead to memory corruption beyond the intended buffer limits. While the direct implications of exploitation might include unexpected application behavior, specific outcomes such as arbitrary code execution, information disclosure, and denial-of-service have yet to be verified.

References