Vulnerability Intelligence Report
Command Injection Vulnerability in Telnet CLI on TP-Link TL-MR6400
CVE-2026-3841
A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability.
No Active Exploit Signals
CVSS Base Score
8.5
HIGH
EPSS Probability:1.77%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-78 ↗CWE-78 Improper neutralization of special elements used in an OS command ('OS command injection')
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| TP-Link Systems Inc. | TL-MR6400 v5.3 | 0 < 1.9.0 Build 260108 (affected) |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.774%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | TP-Link Systems Inc. · Vendor · USA |
| Reserved | 2026-03-09T17:28:57 |
| Published | 2026-03-12T17:25:58 |
| Last Updated | 2026-03-13T14:35:24 |
Community Chatter & Buzz