Medium severityNVD Advisory· Published Aug 10, 2026

CVE-2026-12339

Description

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on the underlying system, affecting system integrity and availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Archer MR200llm-fuzzy
Range: v7
TP-Link/TL-MR6400llm-fuzzy
Range: v5.30
TP-Link/Archer MR600llm-fuzzy
Range: v2

Patches

Vulnerability mechanics

References

www.tp-link.com/en/support/download/archer-mr200/v7/nvd
www.tp-link.com/en/support/download/archer-mr600/v2/nvd
www.tp-link.com/en/support/download/tl-mr6400/v5.30/nvd
www.tp-link.com/en/support/faq/5237/nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000