A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Aug 21, 2026 · NIST NVD

   Detected

   A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request. Successful exploitation may cause the web service process to crash, resulting in a denial-of-service condition

2. Oct 14, 2026 · NIST NVD

   Updated

   A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP request. Successful exploitation may cause the web service process to crash, resulting in a denial-of-service condition

Sources

• CVE.orgVulnerability recordCVE-2026-17252

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2026-17252

  30-day exploitation probability 0.3%

  first.org
• NIST NVDVulnerability recordCVE-2026-17252

  A stack-based out-of-bounds write vulnerability exists in the login request handling functionality of the administrative web interface of TP-Link TL-MR6400 v7 routers. An unauthenticated adjacent attacker can trigger the vulnerability by sending a specially crafted malformed HTTP

  nvd.nist.gov

References

• Reference · tp-link.com
• Reference · tp-link.com
• Reference · tp-link.com