Command Injection Vulnerability in TP-Link TL-MR6400 Router

CVE-2026-3841

What is CVE-2026-3841?

A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of the TP-Link TL-MR6400 v5.3 router. This vulnerability stems from inadequate sanitization of user input during specific CLI operations. An attacker with authenticated access and elevated privileges could exploit this flaw to execute arbitrary commands on the system. Successful exploitation could lead to complete compromise of the device, jeopardizing the confidentiality, integrity, and availability of the system.

References