CVE-2026-17252
High
Description
A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request. Successful exploitation may cause the web service process to crash, resulting in a denial-of-service condition and temporary loss of access to the router's web management interface.
SeverityHigh
CVSS7.1
Exploit probability—
ProductTL-MR6400 v7.0
PublishedAug 21, 2026
First seenAug 21, 2026
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- TP-Link Systems Inc. TL-MR6400 v7.01.9.0 Build 260714 or later
Patches
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| TP-Link Systems Inc. TL-MR6400 v7.0 | v < 1.9.0 Build 260714 | 1.9.0 Build 260714 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.