TP Link Systems Inc. TL Mr100 V3.20 vulnerabilities
2 vulnerabilities
Known vulnerabilities in TP Link Systems Inc. TL Mr100 V3.20, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-75118tp-link systems inc. · tl-mr100 v3.20http_gdpr_decrypt Pre-Authentication Stack-Based Buffer OverflowA pre-authentication stack-based buffer overflow vulnerability exists in the http_gdpr_decrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface can trigger memory corruption and potentially achieve arbitrary code execution.
Successful exploitation can overwrite saved control-flow data on the httpd process stack prior to authentication, resulting in a service crash or potential arbitrary code execution in the context of the affected process.EPSS0.37%MediumCVE-2026-12339tp-link systems inc. · archer mr200 v7 +5 moreAuthenticated Arbitrary File Write Vulnerability in multiple devicesA Zip Slip vulnerability in the WebUI ISP
Upgrade functionality allows arbitrary file write via a crafted archive
containing directory traversal sequences. An authenticated administrator may
overwrite arbitrary files on the system.Successful
exploitation may allow arbitrary file to be overwritten on the underlying system, affecting system integrity and availability.EPSS0.53%