CVE-2026-17250
HighCVSS 8.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
TP-Link TL-MR6400 v7 router has a stack-based buffer overflow vulnerability in the firmware update functionality due to unsafe processing of attacker-controlled metadata within a firmware image. An authenticated attacker can exploit this to trigger memory corruption and execute arbitrary code.
Risk Assessment
An attacker can cause memory corruption and execute arbitrary code on the device, leading to full compromise of the router.
Recommendation
Apply firmware updates from the vendor if available, and restrict access to the update functionality.
Other vulnerabilities in TP-Link TL-MR6400
See all- CVE-2026-17252High
TP-Link TL-MR6400 v7 router has a stack-based out-of-bounds write vulnerability in the login request handling of the administrative web interface. An unauthenticated adjacent attacker can send a specially crafted malformed HTTP request, causing the web service process to crash.
- CVE-2026-17251High
TP-Link TL-MR6400 v7 router has a NULL pointer dereference vulnerability in the HTTP request parsing functionality. An unauthenticated remote attacker can send a specially crafted HTTP request with a malformed session cookie header, causing the HTTP service process to crash.
Original NVD description (English source)
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary code on the affected device.