TP-Link TL-WR940N Vulnerability Enables Remote Code Execution Attacks

TP-Link has issued a security advisory regarding a high-severity vulnerability affecting its TL-WR940N V6 wireless router. This vulnerability, tracked as CVE-2026-12935, could allow unauthenticated attackers to trigger a denial-of-service condition or achieve remote code execution on vulnerable devices under certain circumstances. The issue lies within the router’s RTSP connection tracking (conntrack) feature. RTSP, or Real-Time Streaming Protocol, is commonly used to control multimedia streaming sessions. The vulnerable module processes RTSP-related network traffic within the router’s kernel, which is the core part of its operating system. According to TP-Link, the vulnerability is caused by a stack-based buffer overflow....

Read the full article at the source.