TP-Link Systems Inc. TL-WR845N v4 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting TP-Link Systems Inc. TL-WR845N v4: 2 record(s), with affected versions and fixes.
CVE-2026-12001
Medium · 5.2
CWE-798 Jul 27, 2026
Hardcoded Credential Vulnerability in Multiple TP-Link Router Models
A hardcoded credential
vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is
embedded within a password file in the firmware image and may be recovered
through firmware analysis.
Successful
exploitation could result in unauthorized access to privileged functions on
affected devices.
CVE-2025-15551
Medium · 5.6
CWE-95 Feb 5, 2026
LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N
The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.