CVE-2022-26987

HighCVSS 7.8

Published: 10/05/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.41%

69th percentile - higher than 69% of all known CVEs

Summary

A stack overflow vulnerability exists in the `MmtAtePrase` function of TP-Link TL-WDR7660, Mercury D196G, and Fast FAC1900R routers. Local users can achieve remote code execution.

Risk Assessment

An attacker with local access can take control of the router, leading to network and data security breaches.

Recommendation

Immediately update the router firmware to the latest version and restrict local access to the devices.

Other vulnerabilities in TP-Link TL-WDR7660

CVE-2022-26988High
TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow vulnerability in the `MntAte` function. Local users can achieve remote code execution.

Original NVD description (English source)

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS