Improper input validation in TP-Link System Inc. Tl-Wr940n V6

CVE-2025-11676

Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 (UPnP modules), which allows unauthenticated adjacent attackers to perform DoS attack. This issue affects TL-WR940N V6 <= Build 220801.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.002 (8.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References