← Back to CVE Explorer

CVE-2026-8619

Full vulnerability record from the local CVENow database.

Description

An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference.  A remote attacker on an adjacent network can send a specially crated HTTP request to trigger a crash of the HTTP service process. Successful exploitation may cause the HTTP service to crash, making the web management interface and HTTP-dependent functionality temporarily unavailable.

Severity
HIGH
CVSS score
7.1 (v4.0)
Vulnerability status
Analyzed
Source identifier
f23511db-6c3e-4e32-a477-6aa17d310630
Published
2026-08-20 00:16:53.157000
Last modified
2026-10-27 10:10:00.240000
View original CVE JSON 
{
  "id": "CVE-2026-8619",
  "sourceIdentifier": "f23511db-6c3e-4e32-a477-6aa17d310630",
  "published": "2026-08-20T00:16:53.157",
  "lastModified": "2026-10-27T10:10:00.240",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference. \nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.\n\n\n\n\n\nSuccessful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de denegación de servicio no autenticada fue identificada en TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 y Archer MR600 v2, debido a un manejo inadecuado de condiciones de solicitud excepcionales que puede llevar a una desreferencia de puntero NULL. Un atacante remoto en una red adyacente puede enviar una solicitud HTTP especialmente diseñada para desencadenar una caída del proceso del servicio HTTP.\n\nLa explotación exitosa puede provocar la caída del servicio HTTP, haciendo que la interfaz de administración web y la funcionalidad dependiente de HTTP queden temporalmente no disponibles."
    }
  ],
  "affected": [
    {
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "affectedData": [
        {
          "vendor": "TP-Link Systems Inc.",
          "product": "TL-MR100 v3.2",
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "TL-MR100(EU)_V3.20_1.3.0 Build 260609 Rel.49957n",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "TP-Link Systems Inc.",
          "product": "TL-MR150 v.3.2",
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "TL-MR150(EU)_V3.20_1.3.0 Build 260720 Rel.59727n",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "TP-Link Systems Inc.",
          "product": "TL-MR6400 v8.0",
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "TL-MR6400(EN)_V8_1.5.0 Build 260610 Rel.67978n",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        },
        {
          "vendor": "TP-Link Systems Inc",
          "product": "Archer MR600 v2",
          "defaultStatus": "unaffected",
          "platforms": [
            "Linux"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "Archer MR600(EU)_V2_1.10.0 Build 260618",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "attackVector": "ADJACENT",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "vulnIntegrityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-20T16:03:32.689670Z",
          "id": "CVE-2026-8619",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "configurations": [
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:tp-link:tl-mr100_firmware:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.3.0",
              "matchCriteriaId": "9F9326ED-3A60-4BDC-A3FE-8DC5D1662E86"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:tp-link:tl-mr100:3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5B9C00A-1E30-4DCE-8C5A-E74F134C40F3"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:tp-link:archer_mr600_firmware:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.10.0",
              "matchCriteriaId": "556BE4EF-D6AB-4B2A-9BB1-F41275C60832"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:tp-link:archer_mr600:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "76608FFD-2700-47DD-B210-2F91E0961C59"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:tp-link:tl-mr150_firmware:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.3.0",
              "matchCriteriaId": "AB855F50-0B15-4404-9902-6AE52D087C2D"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:tp-link:tl-mr150:3.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F8F1FC50-55E2-4798-AE1F-78622DD91A27"
            }
          ]
        }
      ]
    },
    {
      "operator": "AND",
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:o:tp-link:tl-mr6400_firmware:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.5.0",
              "matchCriteriaId": "F6939D13-5DFD-4FF4-8D1F-134C7677A4A6"
            }
          ]
        },
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": false,
              "criteria": "cpe:2.3:h:tp-link:tl-mr6400:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "47F4753F-84FC-4716-9D43-F24818C76CD1"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.tp-link.com/en/support/download/archer-mr600/v2/#Firmware",
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://www.tp-link.com/en/support/download/tl-mr100/v3.20/#Firmware",
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://www.tp-link.com/en/support/download/tl-mr150/v3.20/#Firmware",
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware",
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "tags": [
        "Product"
      ]
    },
    {
      "url": "https://www.tp-link.com/us/support/faq/5253/",
      "source": "f23511db-6c3e-4e32-a477-6aa17d310630",
      "tags": [
        "Vendor Advisory"
      ]
    }
  ]
}