Stack-Based Buffer Overflow in RE210 AC750 by TP-Link

CVE-2026-85384

What is CVE-2026-85384?

A stack-based buffer overflow vulnerability in the httpd component of TP-Link's RE210 AC750 arises due to insufficient bounds checking within the splitString function during the handling of an uploaded configuration file. An authenticated attacker on the local network can exploit this flaw by uploading a specifically crafted configuration file that triggers the overflow. This exploitation could potentially lead to unauthorized access to sensitive information, modification of device configurations, and disruptions in device functionality or availability.

References