CVE-2026-76650

The record

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in a denial-of-service condition affecting UPnP discovery, state query, or related management functionality until the affected process is restarted or the device is rebooted.

Affected packages

Related vulnerabilities

• CVE-2026-112405 Pillow is a Python imaging library. CWE-476
• CVE-2026-112392 Pillow is a Python imaging library. CWE-476
• CVE-2026-100348 kin-openapi is a Go project for handling OpenAPI files. CWE-476
• CVE-2026-100349 kin-openapi is a Go project for handling OpenAPI files. CWE-476
• CVE-2026-109280 ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx… CWE-476
• CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the… CWE-476
• CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the… CWE-476
• CVE-2026-107655 A flaw was found in CUPS. CWE-476