CVE-2019-15060

The traceroute function on the TP-Link TL-WR840N v4 router with firmware through 0.9.1 3.16 is vulnerable to remote code execution via a crafted payload in an IP address input field.

• CWE-78

• https://twitter.com/rapt00rvfThird Party Advisory
• https://vitor-fernandes.github.io/First-CVE/Exploit, Third Party Advisory
• https://twitter.com/rapt00rvfThird Party Advisory
• https://vitor-fernandes.github.io/First-CVE/Exploit, Third Party Advisory

Published

Aug 22, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-15053The "HTML Include and replace macro" plugin before 1.5.0 for…
• CVE-2019-15054Multiple cross-site scripting (XSS) vulnerabilities in Mailb…6.1
• CVE-2019-15055MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 i…
• CVE-2019-15058stb_image.h (aka the stb image loader) 2.23 has a heap-based…
• CVE-2019-15059In Liberty lisPBX 2.0-4, configuration backup files can be r…7.5
• CVE-2019-1506Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-15062An issue was discovered in Dolibarr 11.0.0-alpha. A user can…
• CVE-2019-15064HiNet GPON firmware version < I040GWR190731 allows an attack…9.8
• CVE-2019-15065A service which is hosted on port 6998 in HiNet GPON firmwar…7.5
• CVE-2019-15066An “invalid command” handler issue was discovered in HiNet G…9.8
• CVE-2019-15067An authentication bypass vulnerability discovered in Smart B…9.8
• CVE-2019-15068A broken access control vulnerability in Smart Battery A4, a…9.8