Command Injection Vulnerability in TP-Link TL-MR6400 Router
CVE-2026-3841

8.5HIGH

Key Information:

Vendor
CVE Published:
12 March 2026

What is CVE-2026-3841?

A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of the TP-Link TL-MR6400 v5.3 router. This vulnerability stems from inadequate sanitization of user input during specific CLI operations. An attacker with authenticated access and elevated privileges could exploit this flaw to execute arbitrary commands on the system. Successful exploitation could lead to complete compromise of the device, jeopardizing the confidentiality, integrity, and availability of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

TL-MR6400 v5.3 Linux 0 < 1.9.0 Build 260108

References

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

MrBruh
.