LOWVulnerability
CVE-2026-76649
A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a denial-of-service condition affecting UPnP functionality until the service is restarted or the device is rebooted.
Properties
- epss_score
- 0.00179
- cve_id
- CVE-2026-76649
- published_at
- 2026-08-28T22:16:53.250
- last_modified
- 2026-09-01T20:50:58.753
- epss_percentile
- 0.07488
Related Entities (3)
ENRICHED_BY (1)
→[Source]FIRST EPSS
HAS_WEAKNESS (1)
→[Weakness]NULL Pointer Dereference
DESCRIBED_BY (1)
→[Source]NVD
Explore deeper with Ninja Signal's threat intelligence graph