CVE-2026-17250

Published: Ago 21, 2026 Last Modified: Ago 21, 2026
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 8,5
Source: f23511db-6c3e-4e32-a477-6aa17d310630
Attack Vector: adjacent
Attack Complexity: low
Privileges Required: high
User Interaction: none
Confidentiality: N/A
Integrity: N/A
Availability: N/A

Description

AI Translation Available

A
stack-based buffer overflow vulnerability exists in the firmware update
functionality of TL-MR6400 v7 due to unsafe processing of
attacker-controlled metadata within a firmware image.

Successful
exploitation may allow an authenticated attacker to trigger memory corruption
and execute arbitrary code on the affected device.

121

Stack-based Buffer Overflow

Draft
Abstraction: Variant Structure: Simple
Common Consequences
Security Scopes Affected:
Availability Integrity Confidentiality Access Control Other
Potential Impacts:
Modify Memory Dos: Crash, Exit, Or Restart Dos: Resource Consumption (Cpu) Dos: Resource Consumption (Memory) Execute Unauthorized Code Or Commands Bypass Protection Mechanism Other
Applicable Platforms
Languages: Memory-Unsafe, C, C++
Likelihood of Exploit: High
View CWE Details
https://www.tp-link.com/en/support/download/tl-mr6400/v7/#F…
https://www.tp-link.com/en/support/download/tl-mr6400/v7/#Firmware
https://www.tp-link.com/tw/support/download/tl-mr6400/v7/#F…
https://www.tp-link.com/tw/support/download/tl-mr6400/v7/#Firmware
https://www.tp-link.com/us/support/faq/5259/
https://www.tp-link.com/us/support/faq/5259/