CVE-2026-8619

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8619", "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "state": "PUBLISHED", "assignerShortName": "TPLink", "dateReserved": "2026-05-14T18:04:19.124Z", "datePublished": "2026-08-19T23:11:51.163Z", "dateUpdated": "2026-08-20T16:27:30.130Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "shortName": "TPLink", "dateUpdated": "2026-08-19T23:11:51.163Z"}, "title": "Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "affected": [{"vendor": "TP-Link Systems Inc.", "product": "TL-MR100 v3.2", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "TL-MR100(EU)_V3.20_1.3.0 Build 260609 Rel.49957n", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-MR150 v.3.2", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "TL-MR150(EU)_V3.20_1.3.0 Build 260720 Rel.59727n", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-MR6400 v8.0", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "TL-MR6400(EN)_V8_1.5.0 Build 260610 Rel.67978n", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc", "product": "Archer MR600 v2", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "Archer MR600(EU)_V2_1.10.0 Build 260618", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference.\u00a0\nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.\n\n\n\n\n\nSuccessful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference.&nbsp;\nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.</p>\n\n<p>Successful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable.&nbsp;&nbsp;</p>"}]}], "references": [{"url": "https://www.tp-link.com/en/support/download/archer-mr600/v2/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/en/support/download/tl-mr100/v3.20/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/en/support/download/tl-mr150/v3.20/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/us/support/faq/5253/", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "haehet", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8619", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-20T16:03:32.689670Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-20T16:27:30.130Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8619", "assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "state": "PUBLISHED", "assignerShortName": "TPLink", "dateReserved": "2026-05-14T18:04:19.124Z", "datePublished": "2026-08-19T23:11:51.163Z", "dateUpdated": "2026-08-19T23:11:51.163Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "f23511db-6c3e-4e32-a477-6aa17d310630", "shortName": "TPLink", "dateUpdated": "2026-08-19T23:11:51.163Z"}, "title": "Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-476", "description": "CWE-476 NULL pointer dereference", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-125", "descriptions": [{"lang": "en", "value": "CAPEC-125 Flooding"}]}], "affected": [{"vendor": "TP-Link Systems Inc.", "product": "TL-MR100 v3.2", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "TL-MR100(EU)_V3.20_1.3.0 Build 260609 Rel.49957n", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-MR150 v.3.2", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "TL-MR150(EU)_V3.20_1.3.0 Build 260720 Rel.59727n", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc.", "product": "TL-MR6400 v8.0", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "TL-MR6400(EN)_V8_1.5.0 Build 260610 Rel.67978n", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "TP-Link Systems Inc", "product": "Archer MR600 v2", "platforms": ["Linux"], "versions": [{"status": "affected", "version": "0", "lessThan": "Archer MR600(EU)_V2_1.10.0 Build 260618", "versionType": "custom"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference.\u00a0\nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.\n\n\n\n\n\nSuccessful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "<p>An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference.&nbsp;\nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.</p>\n\n<p>Successful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable.&nbsp;&nbsp;</p>"}]}], "references": [{"url": "https://www.tp-link.com/en/support/download/archer-mr600/v2/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/en/support/download/tl-mr100/v3.20/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/en/support/download/tl-mr150/v3.20/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware", "tags": ["patch"]}, {"url": "https://www.tp-link.com/us/support/faq/5253/", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "HIGH", "baseScore": 7.1, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}}], "credits": [{"lang": "en", "value": "haehet", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8619", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-20T16:03:32.689670Z"}}}], "providerMetadata": {"shortName": "CISA-ADP", "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "dateUpdated": "2026-08-20T16:20:41.264Z"}, "title": "CISA ADP Vulnrichment"}]}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Linux"], "product": "TL-MR100 v3.2", "vendor": "TP-Link Systems Inc.", "versions": [{"lessThan": "TL-MR100(EU)_V3.20_1.3.0 Build 260609 Rel.49957n", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["Linux"], "product": "TL-MR150 v.3.2", "vendor": "TP-Link Systems Inc.", "versions": [{"lessThan": "TL-MR150(EU)_V3.20_1.3.0 Build 260720 Rel.59727n", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["Linux"], "product": "TL-MR6400 v8.0", "vendor": "TP-Link Systems Inc.", "versions": [{"lessThan": "TL-MR6400(EN)_V8_1.5.0 Build 260610 Rel.67978n", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "platforms": ["Linux"], "product": "Archer MR600 v2", "vendor": "TP-Link Systems Inc", "versions": [{"lessThan": "Archer MR600(EU)_V2_1.10.0 Build 260618", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "f23511db-6c3e-4e32-a477-6aa17d310630"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-mr100_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F9326ED-3A60-4BDC-A3FE-8DC5D1662E86", "versionEndExcluding": "1.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-mr100:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "E5B9C00A-1E30-4DCE-8C5A-E74F134C40F3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:archer_mr600_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "556BE4EF-D6AB-4B2A-9BB1-F41275C60832", "versionEndExcluding": "1.10.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:archer_mr600:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "76608FFD-2700-47DD-B210-2F91E0961C59", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-mr150_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AB855F50-0B15-4404-9902-6AE52D087C2D", "versionEndExcluding": "1.3.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-mr150:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "F8F1FC50-55E2-4798-AE1F-78622DD91A27", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:tp-link:tl-mr6400_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F6939D13-5DFD-4FF4-8D1F-134C7677A4A6", "versionEndExcluding": "1.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:tp-link:tl-mr6400:8.0:*:*:*:*:*:*:*", "matchCriteriaId": "47F4753F-84FC-4716-9D43-F24818C76CD1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference.\u00a0\nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.\n\n\n\n\n\nSuccessful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable."}, {"lang": "es", "value": "Una vulnerabilidad de denegaci\u00f3n de servicio no autenticada fue identificada en TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 y Archer MR600 v2, debido a un manejo inadecuado de condiciones de solicitud excepcionales que puede llevar a una desreferencia de puntero NULL. Un atacante remoto en una red adyacente puede enviar una solicitud HTTP especialmente dise\u00f1ada para desencadenar una ca\u00edda del proceso del servicio HTTP.\n\nLa explotaci\u00f3n exitosa puede provocar la ca\u00edda del servicio HTTP, haciendo que la interfaz de administraci\u00f3n web y la funcionalidad dependiente de HTTP queden temporalmente no disponibles."}], "id": "CVE-2026-8619", "lastModified": "2026-10-27T10:10:00.240", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-8619", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-20T16:03:32.689670Z", "version": "2.0.3"}}]}, "published": "2026-08-20T00:16:53.157", "references": [{"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Product"], "url": "https://www.tp-link.com/en/support/download/archer-mr600/v2/#Firmware"}, {"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Product"], "url": "https://www.tp-link.com/en/support/download/tl-mr100/v3.20/#Firmware"}, {"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Product"], "url": "https://www.tp-link.com/en/support/download/tl-mr150/v3.20/#Firmware"}, {"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Product"], "url": "https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware"}, {"source": "f23511db-6c3e-4e32-a477-6aa17d310630", "tags": ["Vendor Advisory"], "url": "https://www.tp-link.com/us/support/faq/5253/"}], "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-476"}], "source": "f23511db-6c3e-4e32-a477-6aa17d310630", "type": "Secondary"}]}

{}

{"created": "2026-08-20T08:15:17.070537+00:00", "updated": "2026-08-20T08:15:17.070542+00:00", "vendors": []}