CVE-2026-12339 in TL-MR6400información

Resumen

por MITRE • 2026-08-10

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on the underlying system, affecting system integrity and availability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Responsable

TPLink

Reservar

2026-06-15

Divulgación

2026-08-10

Moderación

aceptado

Artículo

VDB-387850

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Fuentes

Do you want to use VulDB in your project?

Use the official API to access entries easily!