High-Severity Vulnerability in TP-Link TL-WR940N Router Exposed

TP-Link has issued a security advisory for a critical vulnerability in its TL-WR940N V6 wireless router, identified as CVE-2026-12935. This flaw allows unauthenticated remote attackers to execute arbitrary code, potentially taking full control of affected devices. The vulnerability is linked to the router's RTSP connection tracking feature, which could lead to denial-of-service conditions or remote code execution under specific circumstances. The CVSS v4.0 score for this vulnerability is 8.7, categorizing it as high severity. Users of the TL-WR940N V6 router are advised to take immediate action to secure their devices. The vulnerability was published on July 29, 2026, and has raised significant concerns within the cybersecurity community. TP-Link's advisory emphasizes the urgency of addressing this issue to prevent exploitation.

Key Points: • CVE-2026-12935 allows remote code execution on TL-WR940N V6 routers. • The vulnerability has a CVSS score of 8.7, indicating high severity. • TP-Link has issued a security advisory urging users to secure their devices.