CVE-2026-17250
Received Received - Intake

Stack-Based Buffer Overflow in TP-Link TL-MR6400 Firmware

Publication date: 2026-08-21

Last updated on: 2026-08-21

Assigner: TPLink

Description
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image. Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary code on the affected device.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-21
Last Modified
2026-08-21
Generated
2026-08-21
AI Q&A
2026-08-21
EPSS Evaluated
N/A
NVD
CVE-2026-17250
EUVD
EUVD-2026-64006

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
tp-link tl-mr6400 to 1.3.0 (exc)
tp-link tl-mr6400 to 1.9.0 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-17250 is a stack-based buffer overflow vulnerability in the TL-MR6400 v7 router's firmware update functionality. It occurs due to unsafe processing of attacker-controlled metadata within a firmware image, allowing memory corruption and arbitrary code execution on the device.

Detection Guidance

Detecting this vulnerability requires checking the firmware version of your TL-MR6400 v7 router. Compare the installed version against the patched version TL-MR6400(APAC)_V7_1.3.0 Build 260714 or TL-MR6400(APAC)_V7_1.9.0 Build 260714. Use the router's admin interface or SSH to verify the firmware version.

Impact Analysis

An authenticated attacker could exploit this flaw to execute arbitrary code remotely, potentially gaining unauthorized access to the device or causing memory corruption. This may lead to device compromise, loss of control, or further network breaches if the router is used as an entry point.

Compliance Impact

This vulnerability could lead to unauthorized code execution on network devices, potentially exposing sensitive data. For GDPR, it may result in unauthorized access to personal data, violating confidentiality requirements. For HIPAA, it could compromise protected health information if the device handles such data. Failure to patch may lead to non-compliance with security controls in these regulations.

Mitigation Strategies

Immediately update the firmware to version TL-MR6400(APAC)_V7_1.3.0 Build 260714 or later from TP-Link's official website. Ensure backups of router settings before updating. Avoid using untrusted firmware images and restrict network access to the router's admin interface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-17250. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart