CVE-2025-9014

High · 7.5

CVSS

7.5

EPSS

0.5%

Published

Jan 15, 2026

CISA due date

—

The record

A Null Pointer Dereference vulnerability exists in the referer header check of the web portal of TP-Link TL-WR841N v14, caused by improper input validation. A remote, unauthenticated attacker can exploit this flaw and cause Denial of Service on the web portal service.This issue affects TL-WR841N v14: before 250908.

Affected packages

Ecosystem	Package	Introduced	Fixed