Approved changes feed: RSS · Atom

cpe:2.3:a:tp_link_systems_inc.:tl-wr840n_v6:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTp Link Systems Inc. (2d72f0c3-fb5b-5014-bdd1-77c8dc66b28b)
ProductTl Wr840N V6 (35239fde-4748-591b-b101-6ed123d8b75e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3227 vulnerable 2026-06-03 15:23:31.880331 Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file that results in execution of OS commands with root privileges during port-trigger processing. Successful exploitation allows an authenticated attacker to execute system commands with root privileges, leading to full device compromise.
Published: 2026-03-13T21:38:31.666Z
Updated: 2026-03-17T03:55:35.442Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.