en
Severity across 3 analyzed records
A short verification protects source data and prevents automated AI requests.
The GCVE catalog currently lists 3 vulnerability records affecting TL-WR940N v6.
Among the 3 records analyzed by CyStack, 3 are High or Critical and 0 appear in the CISA KEV catalog.
Compare the version you run with each vulnerability and the provider guidance below. The data only includes records analyzed so far.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
Explore CyStack VulnScan
| CVE | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2026-12935Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature | Exploitation statusNot known exploited | FixYes | Published07/29/2026 | SeverityHigh |
CVE-2026-11409OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N | Exploitation statusNot known exploited | FixYes | Published06/16/2026 | SeverityHigh |
CVE-2026-11410OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N | Exploitation statusNot known exploited | FixYes | Published06/16/2026 | SeverityHigh |
