CVE-2026-8619highCWE-476

CVE-2026-8619: falha de alta gravidade em TP-Link Systems Inc. TL-MR100 v3.2

Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar TL-MR6400+ Monitorar Archer MR600

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.9%
An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference.  A remote attacker on an adjacent network can send a specially crated HTTP request to trigger a crash of the HTTP service process. Successful exploitation may cause the HTTP service to crash, making the web management interface and HTTP-dependent functionality temporarily unavailable.
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
TP-Link Systems Inc · Archer MR600 v2TP-Link Systems Inc. · TL-MR100 v3.2TP-Link Systems Inc. · TL-MR150 v.3.2TP-Link Systems Inc. · TL-MR6400 v8.0