EIP-2026-102076

PRE-CVE

TP-Link TL-WR841N Router - Local File Inclusion

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-102076. PoCs published by Matan Azugi.

AI-analyzed exploit summary This exploit leverages a local file inclusion (LFI) vulnerability in the TP-LINK TL-WR841N router to retrieve the contents of the /etc/shadow file. The script uses Perl with the LWP::UserAgent module to send a crafted HTTP GET request to the vulnerable endpoint.

Description

TP-Link TL-WR841N Router - Local File Inclusion

Exploits (1)

exploitdb WORKING POC VERIFIED

by Matan Azugi · perlwebappshardware

https://www.exploit-db.com/exploits/37982

View Code ZIP pw:eip

This exploit leverages a local file inclusion (LFI) vulnerability in the TP-LINK TL-WR841N router to retrieve the contents of the /etc/shadow file. The script uses Perl with the LWP::UserAgent module to send a crafted HTTP GET request to the vulnerable endpoint.

Classification

Working Poc 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: TP-LINK TL-WR841N 3.13.9 Build 120201 Rel.54965n

No auth needed

Prerequisites: Network access to the vulnerable router · Router's web interface must be accessible

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1083 - File and Directory Discovery

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026