InfoSecBulletin Cybersecurity for mankind
TP-Link has shared a security warning about a serious problem with its TL-WR940N V6 wireless router. This problem, known as CVE-2026-12935, might let attackers who haven’t logged in cause a denial-of-service issue or run their code on affected devices in some situations.
According to TP-Link, the vulnerability is caused by a stack-based buffer overflow. This occurs when specially crafted data exceeds the allocated memory.
TP-Link RCE and SonicWall Zero-Click Flaws Enable Complete Device Compromise
ExfilSquad releases info of over 100,000 UK police officers, staff
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
If a hacker runs code from afar, it is a big security danger. They could change network settings, capture data, modify DNS settings, install harmful software that stays, or use the hacked router to attack other devices on the local network.
The flaw has a CVSS v4.0 score of 8.7 out of 10, which is High. It can be attacked through the network, is easy to exploit, and does not need any login.
TP-Link said that this problem only affects the TL-WR940N hardware version V6. The company has issued firmware updates to fix the issue in supported regions.
The fixed releases have firmware version (EN)_V6_260528 for English devices, (US)_V6_260528 for US devices, and (JP)_V6_260527 for Japanese devices.
Users need to check their router’s hardware version and regional firmware before installing updates. If you install firmware for a different region, it might cause problems or break your device. Only download firmware updates from TP-Link’s official support website.
Organizations and home users should stop unneeded RTSP connections from their devices until the router is updated.
SonicWall
SonicWall Secure Mobile Access, or SMA, devices that connect to the internet have a big flaw. Attackers found two flaws and were supposed to use them to gain full control of the VPN gateway. The campaign lets someone gain root access from a basic web request, without needing a password, session, or user action.
According to CSN INC Ransomware has emerged as the main actor using the full chain. The report says that exploitation started around June 22, and patches came in July. This gave organizations little time to respond.
The risk is very high because VPN devices are placed between the public internet and important internal systems.
