A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Tp-link |
|
No data.
No data.
References
History
Fri, 13 Mar 2026 10:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Tp-link
Tp-link tl-mr6400 |
|
| Vendors & Products |
Tp-link
Tp-link tl-mr6400 |
Thu, 12 Mar 2026 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability. | |
| Title | Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400 | |
| Weaknesses | CWE-78 | |
| References |
| |
| Metrics |
cvssV4_0
|
MITRE
Status: PUBLISHED
Assigner: TPLink
Published: 2026-03-12T17:25:58.864Z
Updated: 2026-03-13T14:35:24.733Z
Reserved: 2026-03-09T17:28:57.540Z
Link: CVE-2026-3841
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-03-12T18:16:26.107
Modified: 2026-03-12T21:07:53.427
Link: CVE-2026-3841
Redhat
No data.