TP-Link Tl-MR6400 Firmware vulnerabilities

2 CVEs affecting TP-Link Tl-MR6400 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-8619, published 2026-08-20.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-3841, published 2026-03-12. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during…
• CVE-2026-8619, published 2026-08-20. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request…