Vulnerabilities

TI-2026-14293 CVE-2026-17252 · GHSA-whg2-2j4x-jfcp

Out-of-bounds write in TP-Link TL-MR6400 v7.0

LOW 31

A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00268 Published 2026-08-21 Fixed in 1.9.0 Build 260714 CWE-787

TI-2026-14292 CVE-2026-17251 · GHSA-cfmx-mjrq-52xj

Unauthenticated Denial of Service via Null Pointer Dereference in HTTP Request Parsing

LOW 32

A NULL pointer dereference vulnerability exists in the HTTP request parsing functionality of TL-MR6400 v7.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.0047 Published 2026-08-21 Fixed in 1.9.0 Build 260714 CWE-476

TI-2026-14291 CVE-2026-17250 · GHSA-82fj-885j-3xg6

Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling

LOW 39

A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image.

CVSS 4.0HIGH 8.5 Adjacent network High privileges No interaction EPSS 0.00295 Published 2026-08-21 Fixed in 1.9.0 Build 260714 CWE-121

Vulnerabilities

Filters

Out-of-bounds write in TP-Link TL-MR6400 v7.0

Unauthenticated Denial of Service via Null Pointer Dereference in HTTP Request Parsing

Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling