Firetruck

CVE-2025-9377

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

TP-Link Archer C7(EU) and TL-WR841N/ND(MS) contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Archer C7(EU) V2TP-Link Systems Inc. / Archer C7(EU) V2>= 0, < 241108affected
TL-WR841N/ND(MS) V9TP-Link Systems Inc. / TL-WR841N/ND(MS) V9>= 0, < 241108affected