---
id: CVE-2026-17250
title: |-
  A
  stack-based buffer overflow vulnerability exists in the firmware update
  functionality of TL-MR6400 v7 due to unsafe processing of
  attacker-controlled metadata within a firmware image
summary: |-
  A
  stack-based buffer overflow vulnerability exists in the firmware update
  functionality of TL-MR6400 v7 due to unsafe processing of
  attacker-controlled metadata within a firmware image. 





  Successful
  exploitation may allow an authenti…
severity: none
cwe:
  - CWE-121
published: '2026-08-21'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:10:00.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-17250'
references:
  - url: 'https://www.tp-link.com/en/support/download/tl-mr6400/v7/#Firmware'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/tw/support/download/tl-mr6400/v7/#Firmware'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/us/support/faq/5259/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
tags:
  - nvd
epss: 0.00295
epssPercentile: 0.20611
ingestedAt: '2026-10-14T19:49:57.561Z'
---

## Overview

A
stack-based buffer overflow vulnerability exists in the firmware update
functionality of TL-MR6400 v7 due to unsafe processing of
attacker-controlled metadata within a firmware image. 





Successful
exploitation may allow an authenticated attacker to trigger memory corruption
and execute arbitrary code on the affected device.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.