What’s Vulnerable › Products

TP-Link TL-WR940N vulnerabilities

23 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your TP-Link TL-WR940N version is affected

Exploited TP-Link TL-WR940N vulnerabilities

• CVE-2023-50224 — TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
• CVE-2023-33538 — TP-Link Multiple Routers Command Injection Vulnerability

Latest TP-Link TL-WR940N vulnerabilities

• CVE-2026-12935 — Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature (CVSS 8.7)
• CVE-2026-11410 — OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N (CVSS 7.2)
• CVE-2026-11409 — OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N (CVSS 7.2)
• CVE-2025-6151 — TP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow (CVSS 8.2)
• CVE-2024-54887 — (CVSS 8.0)
• CVE-2023-50224 — TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability (CVSS 6.5) — exploited
• CVE-2023-36359 — (CVSS 7.5)
• CVE-2023-36358 — (CVSS 7.7)
• CVE-2023-36357 — (CVSS 7.7)
• CVE-2023-36356 — (CVSS 7.7)
• CVE-2023-36355 — (CVSS 9.9)
• CVE-2023-36354 — (CVSS 7.5)
• CVE-2023-33538 — TP-Link Multiple Routers Command Injection Vulnerability (CVSS 8.8) — exploited
• CVE-2023-33537 — (CVSS 8.1)
• CVE-2023-33536 — (CVSS 8.1)
• CVE-2022-43636 — (CVSS 8.8)
• CVE-2022-43635 — (CVSS 6.5)
• CVE-2022-24973 — (CVSS 8.0)
• CVE-2022-24972 — (CVSS 6.5)
• CVE-2022-0650 — (CVSS 8.0)
• CVE-2023-23040 — (CVSS 7.5)
• CVE-2022-24355 — (CVSS 8.8)
• CVE-2019-6989 — (CVSS 8.8)