Skip to content
OpenAdvisories

Product · TP-Link Systems

Deco M9 Plus V2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2026-8618

    Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus

    A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x91 handler. Successful…

    TP-Link Systems Deco M9 Plus V2 Network devices
  • High 7.7
    CVE-2026-17176 EPSS 15%

    OS Command Injection Vulnerability in Deco Devices

    An OS command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafted UDP packet. Successful exploitation may lead to complete devi…

    TP-Link Systems Deco M9 Plus V2 Deco BE11000 V2 Network devices