VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2026/8xxx/CVE-2026-8619.json
T

239 lines
9.8 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-8619",
"assignerOrgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
"state": "PUBLISHED",
"assignerShortName": "TPLink",
"dateReserved": "2026-05-14T18:04:19.124Z",
"datePublished": "2026-08-19T23:11:51.163Z",
"dateUpdated": "2026-08-20T16:27:30.130Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "f23511db-6c3e-4e32-a477-6aa17d310630",
"shortName": "TPLink",
"dateUpdated": "2026-08-19T23:11:51.163Z"
},
"title": "Unauthenticated Denial-of-Service Vulnerability in HTTP Service in TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-476",
"description": "CWE-476 NULL pointer dereference",
"type": "CWE"
}
]
}
],
"impacts": [
{
"capecId": "CAPEC-125",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-125 Flooding"
}
]
}
],
"affected": [
{
"vendor": "TP-Link Systems Inc.",
"product": "TL-MR100 v3.2",
"platforms": [
"Linux"
],
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "TL-MR100(EU)_V3.20_1.3.0 Build 260609 Rel.49957n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "TL-MR150 v.3.2",
"platforms": [
"Linux"
],
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "TL-MR150(EU)_V3.20_1.3.0 Build 260720 Rel.59727n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc.",
"product": "TL-MR6400 v8.0",
"platforms": [
"Linux"
],
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "TL-MR6400(EN)_V8_1.5.0 Build 260610 Rel.67978n",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "TP-Link Systems Inc",
"product": "Archer MR600 v2",
"platforms": [
"Linux"
],
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "Archer MR600(EU)_V2_1.10.0 Build 260618",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference. \nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.\n\n\n\n\n\nSuccessful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>An\nunauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions\nthat may lead to a NULL pointer dereference.&nbsp;\nA remote attacker on an adjacent network can send a specially crated\nHTTP request to trigger a crash of the HTTP service process.</p>\n\n<p>Successful\nexploitation may cause the HTTP service to crash, making the web management\ninterface and HTTP-dependent functionality temporarily unavailable.&nbsp;&nbsp;</p>"
}
]
}
],
"references": [
{
"url": "https://www.tp-link.com/en/support/download/archer-mr600/v2/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/en/support/download/tl-mr100/v3.20/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/en/support/download/tl-mr150/v3.20/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware",
"tags": [
"patch"
]
},
{
"url": "https://www.tp-link.com/us/support/faq/5253/",
"tags": [
"vendor-advisory"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV4_0": {
"attackVector": "ADJACENT",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"vulnConfidentialityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"subIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "HIGH",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED",
"version": "4.0",
"baseSeverity": "HIGH",
"baseScore": 7.1,
"vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
}
],
"credits": [
{
"lang": "en",
"value": "haehet",
"type": "finder"
}
],
"source": {
"discovery": "UNKNOWN"
},
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2026-8619",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-08-20T16:03:32.689670Z"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-08-20T16:27:30.130Z"
}
}
]
}
}
View Git Blame Copy Permalink