CVE-2026-3622: Denial-of-Service Vulnerability in UPnP Component of TP Link's TL-WR841N
The vulnerability exists in the UPnP component of TL-WR841N v14, where improper input validation leads to an out-of-bounds read, potentially causing a crash of the UPnP service.
Successful exploitation can cause the UPnP service to crash, resulting in a Denial-of-Service condition. This vulnerability affects TL-WR841N v14 < EN0.9.1 4.19 Build 260303 Rel.42399n (V14260303) and < US0.9.1.4.19 Build 260312 Rel. 49108n (V140304).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3622?
CVE-2026-3622 has been classified as a denial-of-service vulnerability that can lead to a crash of the UPnP service.
How do I fix CVE-2026-3622?
To mitigate CVE-2026-3622, it is recommended to update the firmware of the TP-Link TL-WR841N v14 to the latest version.
What products are affected by CVE-2026-3622?
CVE-2026-3622 affects the TP-Link TL-WR841N v14 router with specified firmware versions.
What could happen if CVE-2026-3622 is exploited?
Exploiting CVE-2026-3622 could cause the UPnP service of the affected router to crash, leading to denial-of-service.
Is CVE-2026-3622 publicly known?
Yes, CVE-2026-3622 is publicly known and documented in official vulnerability databases.