Lucene search
+L

CVE-2026-12339

🗓️ 10 Aug 2026 18:20:50Reported by TPLinkType 
cve
 cve
🔗 web.nvd.nist.gov👁 48 Views

Authenticated Zip Slip in WebUI ISP Upgrade overwrites arbitrary files via crafted archive.

Related
Affected
Refs
[
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "TL-MR6400 v5.3",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "(EU)_1.10.0 0.9.1 v0001.0 Build 260613 RC.76099n",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer MR600 v2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "(EU)_1.10.0 0.9.1 v0001.0 Build 260618 RC.40417n",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "Archer MR200 v7",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "(EU)_1.3.0 0.9.1 v0001.0 Build 260605 Rel.57870n",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "TL-MR6400 v8.0",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "(EU)_1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978n",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "TL-MR150 v3.20",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "(EU)_1.3.0 0.9.1 v0001.0 Build 260720 Rel.59727n",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "TP-Link Systems Inc.",
    "product": "TL-MR100 v3.20",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "(EU)_1.3.0 0.9.1 v0001.0 Build 260609 Rel.49957n",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.1.0 0.9.1 v0001.0 Build 260609 Rel35479n,  Customized Software for South Korea KT",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.2.0 0.9.1 v0001.0 Build 260609 Rel.36250n, Customized Software for South Korea Telenor",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

26 Aug 2026 05:18Current
5.6Medium risk
Vulners AI Score5.6
CVSS 46.9
EPSS0.00343
SSVC
48