InfoSecBulletin Cybersecurity for mankind
TP-Link has shared a security warning about a serious problem with its TL-WR940N V6 wireless router. This problem, known as CVE-2026-12935, might let attackers who haven’t logged in cause a denial-of-service issue or run their code on affected devices in some situations.
According to TP-Link, the vulnerability is caused by a stack-based buffer overflow. This occurs when specially crafted data exceeds the allocated memory.
Huge European telecom leak exposes clients of Swedbank, SEB, airBaltic, and other companies
PHP2Shell attack exploited a Check Point 0-day to deploy malware
North Korean hackers steal more than $400 million using video images, FBI says
Microsoft’s November 2026 Patch Tuesday addresses 1,093 flaws, with Outlook zero-day
Barracuda ESG flaws exploited, gaining root access
Apple, SAP, and Ivanti Patch Critical flaws Affecting Messaging, Bluetooth, and Enterprise Systems
Jailbroken DeepSeek AI Agent Conducts Two-Week Cyberattack on European Telecom
Daily Cyber security update for 10.11. 2026
IBM fixes 208 API Connect vulnerabilities, 47 critical
89 New ransomware groups emerge in 2026, claiming over 2,200 victims
If a hacker runs code from afar, it is a big security danger. They could change network settings, capture data, modify DNS settings, install harmful software that stays, or use the hacked router to attack other devices on the local network.
The flaw has a CVSS v4.0 score of 8.7 out of 10, which is High. It can be attacked through the network, is easy to exploit, and does not need any login.
TP-Link said that this problem only affects the TL-WR940N hardware version V6. The company has issued firmware updates to fix the issue in supported regions.
The fixed releases have firmware version (EN)_V6_260528 for English devices, (US)_V6_260528 for US devices, and (JP)_V6_260527 for Japanese devices.
Users need to check their router’s hardware version and regional firmware before installing updates. If you install firmware for a different region, it might cause problems or break your device. Only download firmware updates from TP-Link’s official support website.
Organizations and home users should stop unneeded RTSP connections from their devices until the router is updated.
SonicWall
SonicWall Secure Mobile Access, or SMA, devices that connect to the internet have a big flaw. Attackers found two flaws and were supposed to use them to gain full control of the VPN gateway. The campaign lets someone gain root access from a basic web request, without needing a password, session, or user action.
According to CSN INC Ransomware has emerged as the main actor using the full chain. The report says that exploitation started around June 22, and patches came in July. This gave organizations little time to respond.
The risk is very high because VPN devices are placed between the public internet and important internal systems.
