CVE-2026-8619: CWE-476 NULL pointer dereference in TP-Link Systems Inc. TL-MR100 v3.2
CVE-2026-8619 is a high-severity unauthenticated denial-of-service vulnerability affecting TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, and Archer MR600 v2 devices. The issue arises from improper handling of exceptional HTTP request conditions leading to a NULL pointer dereference. A remote attacker on an adjacent network can send a crafted HTTP request to crash the HTTP service process, causing temporary unavailability of the web management interface and HTTP-dependent functions.
AI Analysis
Technical Summary
This vulnerability (CVE-2026-8619) involves a NULL pointer dereference (CWE-476) in TP-Link router models TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, and Archer MR600 v2. The flaw is triggered by specially crafted HTTP requests sent by an unauthenticated remote attacker on an adjacent network, resulting in a crash of the HTTP service process. This denial-of-service condition disrupts access to the device's web management interface and any features relying on HTTP services.
Potential Impact
Successful exploitation causes the HTTP service on affected TP-Link devices to crash, leading to temporary denial of access to the web management interface and interruption of HTTP-dependent functionality. This impacts device manageability but does not indicate remote code execution or data compromise based on the provided data.
Mitigation Recommendations
No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the device's management interface to trusted networks and monitor for unusual HTTP requests from adjacent networks.
CVE-2026-8619: CWE-476 NULL pointer dereference in TP-Link Systems Inc. TL-MR100 v3.2
Description
CVE-2026-8619 is a high-severity unauthenticated denial-of-service vulnerability affecting TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, and Archer MR600 v2 devices. The issue arises from improper handling of exceptional HTTP request conditions leading to a NULL pointer dereference. A remote attacker on an adjacent network can send a crafted HTTP request to crash the HTTP service process, causing temporary unavailability of the web management interface and HTTP-dependent functions.
CVSS v4.0
Score 7.1high
Affected software
TP-Link Systems Inc.
TL-MR100 v3.2
TP-Link Systems Inc.
TL-MR150 v.3.2
TP-Link Systems Inc.
TL-MR6400 v8.0
TP-Link Systems Inc
Archer MR600 v2
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability (CVE-2026-8619) involves a NULL pointer dereference (CWE-476) in TP-Link router models TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0, and Archer MR600 v2. The flaw is triggered by specially crafted HTTP requests sent by an unauthenticated remote attacker on an adjacent network, resulting in a crash of the HTTP service process. This denial-of-service condition disrupts access to the device's web management interface and any features relying on HTTP services.
Potential Impact
Successful exploitation causes the HTTP service on affected TP-Link devices to crash, leading to temporary denial of access to the web management interface and interruption of HTTP-dependent functionality. This impacts device manageability but does not indicate remote code execution or data compromise based on the provided data.
Mitigation Recommendations
No patch or official fix information is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the device's management interface to trusted networks and monitor for unusual HTTP requests from adjacent networks.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- TPLink
- Date Reserved
- 2026-05-14T18:04:19.124Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a863acdacd9273b49c03366
Added to database: 08/19/2026, 23:22:53 UTC
Last enriched: 09/11/2026, 02:47:12 UTC
Last updated: 10/03/2026, 02:46:07 UTC
Views: 99
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.