Deviceways

Router

TP-LINK TL-WR850N

Contribute

Projects for this device

Replacement firmware

Replace router software with a customizable system for network controls and community packages.

How to get started

Follow the guide for your exact router version. The first installation may use its web interface, recovery mode or a serial connection.

Setup
Firmware replacement; route varies by router
You’ll need
Exact hardware revision, an appropriate OpenWrt release and its model-specific installation guide.
v1.0 · GigaDevice GD25Q64CSIG
Open hardware record
v2.0 · GigaDevice GD25Q64CSIG
Open hardware record
v3.0 · Winbond W25Q32JVSIQ
Open hardware record
v1
Get OpenWrt firmware Release listed · 25.12.6
v2
Get OpenWrt firmware Release listed · 25.12.6
v1
Open hardware record
v2
Open hardware record Release listed · 25.12.5
Original project github.com

v1

First installation
TP-Link TFTP; U-Boot TFTP recovery

v2

First installation
U-Boot TFTP recovery
Sources

Features & details

Check the project and hardware shown for each feature.

Device details

tp-link tl-wr850n v1 — device documentation (github.com)Device details — v1 — Source documentation (openwrt.org)

Hardware revision
v1

Device details

tp-link tl-wr850n v2 — device documentation (github.com)Device details — v2 — Source documentation (openwrt.org)

Hardware revision
v2

Device details

TP-LINK TL-WR850N v1 — TechInfoDepot (github.com)

Hardware revision
v1.0

Device details

TP-LINK TL-WR850N v2 — TechInfoDepot (github.com)

Hardware revision
v2.0

Device details

TP-LINK TL-WR850N v3 — TechInfoDepot (github.com)

Hardware revision
v3.0

OpenWrt · v1

OpenWrt · v1 — v1 — Source documentation (openwrt.org)

Installation routes recorded
TP-Link TFTP, U-Boot TFTP recovery
Recovery routes recorded
TP-Link TFTP, U-Boot TFTP recovery
Availability recorded by source
Discontinued

OpenWrt · v2

OpenWrt · v2 — v2 — Source documentation (openwrt.org)

Installation routes recorded
U-Boot TFTP recovery
Recovery routes recorded
U-Boot TFTP recovery
Availability recorded by source
Available 2020

Hardware differences

Security

Saved scan

From our saved security research.

Model advisories

Selected highlights

Prioritized by known exploitation, severity, then date.

CVE published

CVSS 5.9 (v4.0)

TL-WR850N v3

LAN Code Execution on TP-Link Archer MR200, Archer C20, TL-WR850N and TL-WR845N

CVE-2025-15551

Affected firmware
Before 3.16.0 0.9.1 v6031.0 Build 251205 Rel.22089n
Fix
Fix details in the linked record
Read TPLink CVE record
Details and sources
CVE updated

The response coming from TP-Link Archer MR200 v5.2, C20 v5 and v6, TL-WR850N v3, and TL-WR845N v4 for any request is getting executed by the JavaScript function like eval directly without any check. Attackers can exploit this vulnerability via a Man-in-the-Middle (MitM) attack to execute JavaScript code on the router's admin web portal without the user's permission or knowledge.

CVE published

CVSS 5.2 (v4.0)

TL-WR850N v3

Hardcoded Credential Vulnerability in Multiple TP-Link Router Models

CVE-2026-12001

Affected firmware
Before TL-WR850N(IN)_V3.48_3.16.0 Build 260422_2048
Fix
Fix details in the linked record
Read TPLink CVE record
Details and sources
CVE updated

A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5). Authentication-related credential material is embedded within a password file in the firmware image and may be recovered through firmware analysis.

Successful exploitation could result in unauthorized access to privileged functions on affected devices.

CVE published

CVSS 5.1 (v4.0)

TL-WR850N v3

Cleartext Storage of Administrative and Wi-Fi Credentials via Accessible Serial Interface in TP Link's TL-WR850N

CVE-2026-4346

Affected firmware
Before V3_0.9.1 Build251205
Fix
Fix details in the linked record
Read TPLink CVE record
Details and sources
CVE updated

The vulnerability affecting TL-WR850N v3 allows cleartext storage of administrative and Wi-Fi credentials in a region of the device’s flash memory while the serial interface remains enabled and protected by weak authentication. An attacker with physical access and the ability to connect to the serial port can recover sensitive information, including the router’s management password and wireless network key.

Successful exploitation can lead to full administrative control of the device and unauthorized access to the associated wireless network.

Check more security advisories for this device · CVE.org