CVE-2026-3841

HIGH

8.8

Description

A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability.

Details CVE

Score CVSS v3.18.8

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie3/12/2026

Derniere modification4/2/2026

Sourcenvd

Observations honeypot0

Produits affectes

tp-link:tl-mr6400tp-link:tl-mr6400_firmware

Faiblesses (CWE)

CWE-78

References

https://www.tp-link.com/en/support/download/tl-mr6400/v5.30/#Firmware(f23511db-6c3e-4e32-a477-6aa17d310630)

https://www.tp-link.com/us/support/faq/5016/(f23511db-6c3e-4e32-a477-6aa17d310630)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.