Unauthenticated users can take down the user interface on TP-Link WR-841N routers with malformed HTTP requests4. 248 days after my initial report, TP-Link assigned CVE-2025-9014 and released a patch on January 15, 2026. This denial of service vulnerability affects the /usr/bin/httpd web server and user interface on the WR-841N router. The router firmware's /usr/bin/cos init process that's responsible for launching the web server fails to restart it. This means that once an unauthenticated user crashes the /usr/bin/httpd web server, the TP-Link WR-841N's user interface stays inoperable until you manually restart the router. When the router is in a remote location...