CVE-2026-15141

Name of the Vulnerable Software and Affected Versions TL-WR820N (affected versions not specified)

Description Insufficient validation logic in the web management interface allows the bypass of request validation. The system relies on the HTTP referrer header; however, requests that omit the Referer header or contain an empty Referer value may still be accepted and processed. An adjacent attacker with access to the web interface could exploit this to obtain sensitive information and device configuration details.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.