CVE-2026-12935

CVE-2026-12935 affects TL-WR940N v6 routers where the RTSP connection-tracking kernel module is vulnerable to a stack-based buffer overflow when a LAN client connects to a malicious RTSP server. This unauthenticated flaw can lead to denial-of-service or remote code execution, potentially compromi...

CVE-2026-12935 Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...