CVE-2023-46527

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

TP-LINK TL-WR886N V7.0_3.0.14_Build_221115_Rel.56908n.bin and TL-WDR7660 2.0.30 was discovered to contain a stack overflow via the function bindRequestHandle.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
tp-link	tl-wr886n_firmware	7.0_3.0.14_Build_221115_Rel.56908n

References

https://github.com/Jianchun-Ding/CVE-poc-update
https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/13/1.mdExploit, Third Party Advisory
https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=1676623713687165Product
https://github.com/XYIYM/Digging/blob/main/TP-LINK/TL-WR886N/13/1.mdExploit, Third Party Advisory
https://resource.tp-link.com.cn/pc/docCenter/showDoc?id=1676623713687165Product

Timeline

Published: Oct 25, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023