InfoSecBulletin Cybersecurity for mankind
TP-Link has shared a security warning about a serious problem with its TL-WR940N V6 wireless router. This problem, known as CVE-2026-12935, might let attackers who haven’t logged in cause a denial-of-service issue or run their code on affected devices in some situations.
According to TP-Link, the vulnerability is caused by a stack-based buffer overflow. This occurs when specially crafted data exceeds the allocated memory.
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
FortiSandbox, FortiOS, FortiProxy ZTNA flaws unveil, while Fortigate firewall actively exploited
If a hacker runs code from afar, it is a big security danger. They could change network settings, capture data, modify DNS settings, install harmful software that stays, or use the hacked router to attack other devices on the local network.
The flaw has a CVSS v4.0 score of 8.7 out of 10, which is High. It can be attacked through the network, is easy to exploit, and does not need any login.
TP-Link said that this problem only affects the TL-WR940N hardware version V6. The company has issued firmware updates to fix the issue in supported regions.
The fixed releases have firmware version (EN)_V6_260528 for English devices, (US)_V6_260528 for US devices, and (JP)_V6_260527 for Japanese devices.
Users need to check their router’s hardware version and regional firmware before installing updates. If you install firmware for a different region, it might cause problems or break your device. Only download firmware updates from TP-Link’s official support website.
Organizations and home users should stop unneeded RTSP connections from their devices until the router is updated.
SonicWall
SonicWall Secure Mobile Access, or SMA, devices that connect to the internet have a big flaw. Attackers found two flaws and were supposed to use them to gain full control of the VPN gateway. The campaign lets someone gain root access from a basic web request, without needing a password, session, or user action.
According to CSN INC Ransomware has emerged as the main actor using the full chain. The report says that exploitation started around June 22, and patches came in July. This gave organizations little time to respond.
The risk is very high because VPN devices are placed between the public internet and important internal systems.
