EUVD-2026-64006
GHSA-82fj-885j-3xg6
Severity by source
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Adjacent network vector and high privileges required match CVSS 4.0 input; full CIA impact reflects arbitrary code execution on the device with no scope change.
Primary rating from Vendor (TPLink).
CVSS VectorVendor: TPLink
Lifecycle Timeline
2DescriptionCVE.org
A stack-based buffer overflow vulnerability exists in the firmware update functionality of TL-MR6400 v7 due to unsafe processing of attacker-controlled metadata within a firmware image.
Successful exploitation may allow an authenticated attacker to trigger memory corruption and execute arbitrary code on the affected device.
AnalysisAI
Stack-based buffer overflow in TP-Link TL-MR6400 v7 firmware update functionality enables an authenticated, adjacent-network attacker to achieve arbitrary code execution on the affected device. The flaw (CWE-121) arises from unsafe parsing of attacker-controlled metadata embedded in a firmware image, leading to memory corruption at the stack level. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires all of the following conditions simultaneously: (1) the attacker must have high-privilege (administrative) credentials to the TL-MR6400 v7 management interface - confirmed by PR:H in the CVSS 4.0 vector; (2) the attacker must have adjacent network access to reach the device management interface - confirmed by AV:A, meaning direct internet exploitation is not possible without prior network access or pivoting; (3) the target device must be running TL-MR6400 hardware version 7 firmware prior to the patched release. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 score of 8.5 (AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H) reflects high impact across all three CIA pillars but is substantially constrained by the adjacent network vector and high privilege requirement. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Apply the patched firmware released by TP-Link for the TL-MR6400 v7, available at https://www.tp-link.com/en/support/download/tl-mr6400/v7/#Firmware. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, identify and document all TP-Link TL-MR6400 v7 devices in use and evaluate which are exposed to administrative access from untrusted networks or users. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Tl Mr6400 V7 0
View allNULL pointer dereference in TP-Link TL-MR6400 v7's HTTP request parsing crashes the management daemon when an unauthenti
Stack-based out-of-bounds write in the TP-Link TL-MR6400 v7 administrative web interface login handler allows an unauthe
Same weakness CWE-121 – Stack-based Buffer Overflow
View allSame technique Stack Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today