CVE-2026-17252

A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request. Successful exploitation may cause the web service process to crash, resulting in a denial-of-service condition and temporary loss of access to the router's web management interface.

CVSS

No CVSS.

References

Link	Resource
https://www.tp-link.com/en/support/download/tl-mr6400/v7/#Firmware
https://www.tp-link.com/tw/support/download/tl-mr6400/v7/#Firmware
https://www.tp-link.com/us/support/faq/5259/

Configurations

No configuration.

History

14 Oct 2026, 19:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de escritura fuera de límites basada en pila existe en la funcionalidad de manejo de solicitudes de inicio de sesión de la interfaz web administrativa de los routers TP-Link TL-MR6400 v7. Un atacante adyacante no autenticado puede activar la vulnerabilidad enviando una solicitud HTTP malformada y especialmente diseñada. La explotación exitosa puede causar que el proceso del servicio web falle, lo que resulta en una condición de denegación de servicio y la pérdida temporal de acceso a la interfaz de gestión web del router.

Information

Published : 2026-08-21 18:16

Updated : 2026-10-14 19:10

NVD link : CVE-2026-17252

Mitre link : CVE-2026-17252

CVE.ORG link : CVE-2026-17252

JSON object : View

Products Affected

No product.

CWE

CWE-787

Out-of-bounds Write

{"id": "CVE-2026-17252", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-17252", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-21T17:38:28.929657Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "affectedData": [{"vendor": "TP-Link Systems Inc.", "product": "TL-MR6400 v7.0", "versions": [{"status": "affected", "version": "0", "lessThan": "1.9.0 Build 260714", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2026-08-21T18:16:47.803", "references": [{"url": "https://www.tp-link.com/en/support/download/tl-mr6400/v7/#Firmware", "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}, {"url": "https://www.tp-link.com/tw/support/download/tl-mr6400/v7/#Firmware", "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}, {"url": "https://www.tp-link.com/us/support/faq/5259/", "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "A\nstack-based out-of-bounds write vulnerability exists in the login request\nhandling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability\nby sending a specially crafted malformed HTTP request. \n\n\n\n\n\nSuccessful\nexploitation may cause the web service process to crash, resulting in a\ndenial-of-service condition and temporary loss of access to the router's web\nmanagement interface."}, {"lang": "es", "value": "Una vulnerabilidad de escritura fuera de l\u00edmites basada en pila existe en la funcionalidad de manejo de solicitudes de inicio de sesi\u00f3n de la interfaz web administrativa de los routers TP-Link TL-MR6400 v7. Un atacante adyacante no autenticado puede activar la vulnerabilidad enviando una solicitud HTTP malformada y especialmente dise\u00f1ada.\n\nLa explotaci\u00f3n exitosa puede causar que el proceso del servicio web falle, lo que resulta en una condici\u00f3n de denegaci\u00f3n de servicio y la p\u00e9rdida temporal de acceso a la interfaz de gesti\u00f3n web del router."}], "lastModified": "2026-10-14T19:10:00.297", "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630"}