CVE-2026-11410

CVE-2026-11410CVE-2026-11410

tp-link / tl-wr940n_firmware

Description

An authenticated OS command injection vulnerability exists in the BigPond Cable (BPA) WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges.

Scoring

CVSS 7.2 ()
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Last modified2026-06-18
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.