Command Injection Vulnerability in TP-Link TL-MR6400 Router
CVE-2026-3841
What is CVE-2026-3841?
A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of the TP-Link TL-MR6400 v5.3 router. This vulnerability stems from inadequate sanitization of user input during specific CLI operations. An attacker with authenticated access and elevated privileges could exploit this flaw to execute arbitrary commands on the system. Successful exploitation could lead to complete compromise of the device, jeopardizing the confidentiality, integrity, and availability of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
TL-MR6400 v5.3 Linux 0 < 1.9.0 Build 260108
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved
