CVE-2026-76650
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-476
Desreferencia a puntero nulo (NULL)
Fecha de publicación:
28/08/2026
Última modificación:
28/08/2026
Descripción
*** Pendiente de traducción *** A NULL<br />
pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing<br />
SOAP state variable query requests. A specially crafted SOAP query may trigger<br />
unexpected termination or instability of the process hosting the UPnP service.<br />
<br />
<br />
<br />
<br />
<br />
Successful<br />
exploitation may result in a denial-of-service condition affecting UPnP<br />
discovery, state query, or related management functionality until the affected<br />
process is restarted or the device is rebooted.
Impacto
Puntuación base 4.0
5.30
Gravedad 4.0
MEDIA