CVE-2021-26827

7.5 highEPSS 1.7%

High (7.5) in tp-link tl-wr2041\+ firmware. EPSS 1.7% chance of exploitation in the next 30 days.

Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Service (DoS) by sending an HTTP request with a very long "ssid" parameter to the "/userRpm/popupSiteSurveyRpm.html" webpage, which crashes the router.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
CWE: CWE-120
Published: 2021-04-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

tp-link:tl-wr2041\+_firmware

References

https://github.com/GD008/vuln/blob/main/tplink_wr2041/tplink_WR2041pv1.md
https://github.com/GD008/vuln/blob/main/tplink_wr2041/tplink_WR2041pv1.md

Check your stack JSON