CVE-2026-5039
published 2026-04-23CVE-2026-5039: TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the…
PriorityP352high8.8CVSS 3.1
AVAACLPRNUINSUCHIHAH
EPSS
0.13%
2.9th percentile
TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if device is left in default configuration. A network-adjacent attacker can exploit this weakness to gain unauthorized access to the protocol, read debug data, modify certain device configuration values, and trigger device reboot, resulting in loss of integrity and a denial-of-service condition.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tp-link | tl-wr841n_firmware | < 231120 | 231120 |
| tp-link_systems_inc | tl-wl841n_v13 | < 0.9.1 Build 20231120 Rel.62366 | 0.9.1 Build 20231120 Rel.62366 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv4.06.1MEDIUMCVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
TP-Link TL-WL841N v13 TDDPv2 Debug default key
vuldb·2026-04-23·CVSS 6.1
CVE-2026-5039 [MEDIUM] TP-Link TL-WL841N v13 TDDPv2 Debug default key
A vulnerability was found in TP-Link TL-WL841N v13. It has been declared as problematic. Affected by this issue is some unknown functionality of the component TDDPv2 Debug Handler. Such manipulation leads to use of default cryptographic key.
This vulnerability is uniquely identified as CVE-2026-5039. The attack can only be initiated within the local network. No exploit exists.
GHSA
GHSA-f7mq-68q8-xqv6: TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, m
ghsa_unreviewed·2026-04-23
CVE-2026-5039 [MEDIUM] CWE-1394 GHSA-f7mq-68q8-xqv6: TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, m
TP-Link TL-WR841N v13 uses DES-CBC encryption in the TDDPv2 debug protocol with a cryptographic key derived from default web management credentials, making the key predictable if device is left in default configuration. A network-adjacent attacker can exploit this weakness to gain unauthorized access to the protocol, read debug data, modify certain device configuration values, and trigger device reboot, resulting in loss of integrity and a denial-of-service condition.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-04-23
Published