Read the docs
TI-2019-09106 Aliases CVE-2019-12195GHSA-j3f3-xxfp-q982

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name.

Priority LOW 26CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
Required
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-79.

Summary

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was disconnected. All the users become disconnected from the internet.

Why it matters now

EPSS 0.01756 78th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:tp-link:tl-wr840n_firmware:0.9.1_3.16:*:*:*:*:*:*:*0.9.1_3.16VulnerableTP-Link
cpe:2.3:h:tp-link:tl-wr840n:5.0:*:*:*:*:*:*:*5.0Running onTP-Link
  • cpe:2.3:o:tp-link:tl-wr840n_firmware:0.9.1_3.16:*:*:*:*:*:*:* Versions 0.9.1_3.16 Vulnerable ·TP-Link
  • cpe:2.3:h:tp-link:tl-wr840n:5.0:*:*:*:*:*:*:* Versions 5.0 Running on ·TP-Link

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-12195
  2. 2026-10-03 Alias added: GHSA-j3f3-xxfp-q982

References

Advisory 2

  • TI-2023-27456 Authentication bypass by spoofing in TP-Link TL-WR841N KEVCVSS 3.1MEDIUM 6.5
  • TI-2021-18357 The PING function on the TP-Link TL-WR840N EU v5 router with firmware through… CVSS 3.1CRITICAL 9.8
  • TI-2018-08378 An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608… CVSS 3.0CRITICAL 9.8
  • TI-2022-08817 TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection… CVSS 3.1CRITICAL 9.8
  • TI-2026-02790 Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N CVSS 4.0HIGH 8.5
  • TI-2022-08816 TP-LINK TL-WR840N(ES)_V6.20_180709 was discovered to contain a command injection… CVSS 3.1CRITICAL 9.8
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences