EIP-2026-102075

PRE-CVE

TP-Link TL-WR841N / TL-WR841ND - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102075. PoCs published by smash.

AI-analyzed exploit summary This document details multiple XSS and CSRF vulnerabilities in TP-LINK TL-WR841N/ND routers, including vulnerable parameters and example HTTP requests. It provides technical analysis of how JavaScript injection occurs due to poor input validation.

Description

TP-Link TL-WR841N / TL-WR841ND - Multiple Vulnerabilities

Exploits (1)

exploitdb WRITEUP
by smash · textwebappshardware
https://www.exploit-db.com/exploits/34584

This document details multiple XSS and CSRF vulnerabilities in TP-LINK TL-WR841N/ND routers, including vulnerable parameters and example HTTP requests. It provides technical analysis of how JavaScript injection occurs due to poor input validation.

Classification
Writeup 95%
Attack Type
Xss
Complexity
Trivial
Reliability
Reliable
Target: TP-LINK TL-WR841N / TL-WR841ND (Firmware Version 3.13.27 Build 121101 Rel.38183n)
Auth required
Prerequisites: Access to the router's web interface · Basic authentication credentials
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026