Get real-time updates on Telegram
CVE-2025-9377: tl-wr841n firmware before 241108 (exclusive); +4 more affected products
CVE-2025-9377. CVSS 3.1 base score 7.2 (HIGH, NVD). EPSS 0.37731 (percentile 0.9853), scored 17-Oct-2026.
Affected technology
tl-wr841n firmware · before 241108 (exclusive)
tp-link
tl-wr841nd firmware · before 241108 (exclusive)
tp-link
archer c7 firmware · before 241108 (exclusive)
tp-link
Archer C7(EU) V2 · 0 to before 241108
TP-Link Systems Inc.
TL-WR841N/ND(MS) V9 · 0 to before 241108
TP-Link Systems Inc.
Component: Not specified by the source
Attack conditions (Source advisory, CVSS 4.0): Network (remote) · High privileges required · No user interaction required
What an attacker can do
The source reports that an attacker could run code remotely under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 8.6/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-78
- CCR priority
- 38.2 /100 (P4)
- CVSS 3.1
- 7.2 /10 · CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · NVD
- EPSS
- 0.37731 · percentile 0.9853 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 22:50:08.248207+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-9377.html