CVE-2026-8619
Received Received - Intake

Denial-of-Service in TP-Link TL-MR100/MR150/MR6400/Archer MR600

Publication date: 2026-08-20

Last updated on: 2026-08-20

Assigner: TPLink

Description
An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference.  A remote attacker on an adjacent network can send a specially crated HTTP request to trigger a crash of the HTTP service process. Successful exploitation may cause the HTTP service to crash, making the web management interface and HTTP-dependent functionality temporarily unavailable.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-20
Last Modified
2026-08-20
Generated
2026-08-20
AI Q&A
2026-08-20
EPSS Evaluated
N/A
NVD
CVE-2026-8619
EUVD
EUVD-2026-63168

Affected Vendors & Products

Showing 4 associated CPEs
Vendor Product Version / Range
tp-link tl-mr100 to 3.20 (inc)
tp-link tl-mr150 to 3.20 (inc)
tp-link tl-mr6400 8.0
tp-link archer_mr600 2

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-476 The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated denial-of-service vulnerability in TP-Link routers (TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, Archer MR600 v2). It occurs due to improper handling of HTTP requests, causing a NULL pointer dereference that crashes the HTTP service process. An attacker on the same network can exploit this by sending a specially crafted HTTP request.

Detection Guidance

Detecting this vulnerability requires monitoring for HTTP service crashes on affected TP-Link devices. Check if the web management interface becomes unresponsive or if HTTP-dependent features fail. Use network scanning tools like nmap to identify vulnerable TP-Link models (TL-MR100, TL-MR150, TL-MR6400, Archer MR600) on your network. Monitor logs for HTTP service crashes or NULL pointer dereference errors.

Impact Analysis

Exploitation may cause the HTTP service to crash, making the web management interface and HTTP-dependent features temporarily unavailable. This could disrupt network management and connectivity until the service restarts or the device is rebooted.

Mitigation Strategies

Immediately update the firmware of all affected TP-Link devices to the latest version provided by TP-Link. Download firmware only from the official TP-Link regional website to avoid issues. After updating, verify the HTTP service stability and ensure the web management interface is accessible. Disable unnecessary HTTP services if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-8619. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart