Vulnerability Details CVE-2026-15141
The web
interface of the affected
device relies on the HTTP referrer header as part of
request validation. Requests containing empty Referer value, or omitting
the Referer header entirely, may be accepted and processed due to insufficient
validation logic.
Successful exploitation may allow an adjacent attacker with access to the web management
interface to obtain device configuration details and other sensitive
information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.0%
CVSS Severity
CVSS v3 Score 5.7
References
Products affected by CVE-2026-15141
-
cpe:2.3:h:tp-link:tl-wr820n:2.0
-
cpe:2.3:o:tp-link:tl-wr820n_firmware:1.15.0