Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-12339 EUVD-2026-55700GHSA-www9-662g-pffv

Authenticated Arbitrary File Write Vulnerability in multiple devices

Published Aug 10, 2026 · Updated Aug 25, 2026 · Assigned by TPLink

Vendor: TP-Link Systems Product: Archer MR200 v7 Product: Archer MR600 v2 Product: TL-MR100 v3.20 Product: TL-MR150 v3.20 Product: TL-MR6400 v5.3 Product: TL-MR6400 v8.0 Category: Network devices

Description

A Zip Slip vulnerability in the WebUI ISP
Upgrade functionality allows arbitrary file write via a crafted archive
containing directory traversal sequences. An authenticated administrator may
overwrite arbitrary files on the system.Successful
exploitation may allow arbitrary file to be overwritten on the underlying system, affecting system integrity and availability.

Affected products

VendorProductAffectedFixed
TP-Link Systems TL-MR6400 v5.3 < (EU)_1.10.0 0.9.1 v0001.0 Build 260613 RC.76099n (EU)_1.10.0 0.9.1 v0001.0 Build 260613 RC.76099n
TP-Link Systems Archer MR600 v2 < (EU)_1.10.0 0.9.1 v0001.0 Build 260618 RC.40417n (EU)_1.10.0 0.9.1 v0001.0 Build 260618 RC.40417n
TP-Link Systems Archer MR200 v7 < (EU)_1.3.0 0.9.1 v0001.0 Build 260605 Rel.57870n (EU)_1.3.0 0.9.1 v0001.0 Build 260605 Rel.57870n
TP-Link Systems TL-MR6400 v8.0 < (EU)_1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978n (EU)_1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978n
TP-Link Systems TL-MR150 v3.20 < (EU)_1.3.0 0.9.1 v0001.0 Build 260720 Rel.59727n (EU)_1.3.0 0.9.1 v0001.0 Build 260720 Rel.59727n
TP-Link Systems TL-MR100 v3.20 < (EU)_1.3.0 0.9.1 v0001.0 Build 260609 Rel.49957n, < 1.1.0 0.9.1 v0001.0 Build 260609 Rel35479n,  Customized Software for South Korea KT, < 1.2.0 0.9.1 v0001.0 Build 260609 Rel.36250n, Customized Software for South Korea Telenor (EU)_1.3.0 0.9.1 v0001.0 Build 260609 Rel.49957n

References