TP-Link product
TL-WR841N
No CISA KEV deadline is open. CISA last added a TL-WR841N CVE on 3 Sep 2025.
Tracked since 7 Apr · latest article 2 Oct · RSS · API
0Open KEV deadlines
None open
0Added to KEV · 90 days
of 1 in the full CISA catalogue · all time
0High exploit odds · current
EPSS top 5%, not in KEV
0Articles · 7 days
none this week
Exploited, by due date1
TL-WR841N CVEs in CISA KEV with their federal deadlines. None is open.
| CVE | Product | Added | Federal deadline | Articles |
|---|---|---|---|---|
| In CISA KEVCVE-2023-50224 | TL-WR841N | 3 Sep | Passed 24 Sep | 3 |
Vendor CSV of 6 entries for TP-LinkAll 6 vendor entries, including other products.
Patch cadence and exploit odds
How often CISA adds TL-WR841N CVEs, how many have a fix, and where their exploit odds sit.
Added to CISA KEV per quarter
Show as tableHide table
| Quarter | Added |
|---|---|
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 1 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Fix listed
2 of 2 CVEs in coverage
Every CVE in coverage has a fix recorded.
EPSS percentile of each CVE
One dot per CVE; a red diamond marks those in CISA KEV.
Show as tableHide table
| CVE | EPSS percentile |
|---|---|
| CVE-2023-50224 | 97.4 |
| CVE-2026-102294 | 61.1 |
Coverage4 articles · all time
The latest 4 articles naming TL-WR841N, in the shared story grammar.
Quiet for 4 weekslast report 2 Oct4 articles4 outlets
4 articles from 4 outlets since 7 Apr. Quiet since 2 Oct.
- Tue 7 Apr, 16:01 UTC. Infosecurity, first report. APT28 exploits SOHO routers via CVE‑2023‑50224 to steal credentials. Cites a CVE in CISA KEV.
- Tue 7 Apr, 18:11 UTC. The Hacker News, its first report on the story. APT28 hijacks routers worldwide in DNS based FrostArmada campaign. Cites a CVE in CISA KEV.
- Thu 9 Apr, 21:31 UTC. Dark Reading, its first report on the story. Trend Micro Exposes Fancy Bears Prismex Malware Targeting Ukraine. Cites a CVE in CISA KEV.
- Fri 2 Oct, 15:56 UTC. SecurityOnline, its first report on the story. TP-Link Patches Camera Flaws Allowing Unauthenticated Command Execution.
- Known exploited CVE
- CVE not in KEV
- No CVE
- Larger: an outlet’s first report
- Coverage over time
- Quiet time, folded
Show all 4 articles as a listHide the list
- Tue 7 AprDay 02
- APT28 exploits SOHO routers via CVE‑2023‑50224 to steal credentials16:01 · Infosecurity · First report · Exploited CVE · Known exploited CVE
- APT28 hijacks routers worldwide in DNS based FrostArmada campaign18:11 · The Hacker News · Known exploited CVE
Quiet for 2 days
Thu 9 AprDay 21- Trend Micro Exposes Fancy Bears Prismex Malware Targeting Ukraine21:31 · Dark Reading · Picked up again · Known exploited CVE
Quiet for 25 weeks
Fri 2 OctDay 1781- TP-Link Patches Camera Flaws Allowing Unauthenticated Command Execution15:56 · SecurityOnline · Picked up again
All CVEs in coverage2
Exploited first, then by EPSS
- CVE-2023-50224Exploited
TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability
6.5Medium20% EPSS · 3 articles TP-Link System Inc. TL-WR841N v14 vulnerability
8.5High0.9% EPSS · 1 article