TP-Link WR-841N Denial of Service vulnerability

Unauthenticated users can take down the user interface on TP-Link WR-841N routers with malformed HTTP requests4. 248 days after my initial report, TP-Link assigned CVE-2025-9014 and released a patch on January 15, 2026. This denial of service vulnerability affects the /usr/bin/httpd web server and user interface on the WR-841N router. The router firmware's /usr/bin/cos init process that's responsible for launching the web server fails to restart it. This means that once an unauthenticated user crashes the /usr/bin/httpd web server, the TP-Link WR-841N's user interface stays inoperable until you manually restart the router. When the router is in a remote location that can take up time. The vulnerability is highly exploitable using automation. The only remedy is to update the router firmware. Under certain conditions attackers can trigger this vulnerability from anywhere on the internet. This screenshot shows how you can configure the TP-Link WR-841N to be accessible from anywhere on…