---
id: CVE-2026-17251
title: "A NULL\npointer dereference vulnerability exists in the HTTP request parsing\nfunctionality of\_\nTL-MR6400 v7"
summary: "A NULL\npointer dereference vulnerability exists in the HTTP request parsing\nfunctionality of\_\nTL-MR6400 v7. An unauthenticated remote attacker can\ntrigger the vulnerability by sending a specially crafted HTTP request\ncontaining a malform…"
severity: none
cwe:
  - CWE-476
published: '2026-08-21'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T19:10:00.297'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-17251'
references:
  - url: 'https://www.tp-link.com/en/support/download/tl-mr6400/v7/#Firmware'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/tw/support/download/tl-mr6400/v7/#Firmware'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
  - url: 'https://www.tp-link.com/us/support/faq/5259/'
    label: f23511db-6c3e-4e32-a477-6aa17d310630
tags:
  - nvd
epss: 0.0047
epssPercentile: 0.39129
ingestedAt: '2026-10-14T19:49:57.561Z'
---

## Overview

A NULL
pointer dereference vulnerability exists in the HTTP request parsing
functionality of 
TL-MR6400 v7. An unauthenticated remote attacker can
trigger the vulnerability by sending a specially crafted HTTP request
containing a malformed session cookie header. 





Successful
exploitation may cause the HTTP service process to crash, resulting in a
denial-of-service condition and temporary loss of management or CGI
functionality until service recovery.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.