CVE-2026-85384— Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
Quick assessment
Affected
TP-Link Systems Inc. RE210 AC750
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
该漏洞描述信息翻译如下： RE210 AC750 设备的 httpd 组件中存在一个基于栈的缓冲区溢出漏洞。该漏洞源于 函数在处理上传的配置文件时未进行适当的边界检查。局域网内的经过身份验证的攻击者可以上传一个特制的配置文件以触发该溢出，从而导致远程代码执行。 成功利用该漏洞可能导致对敏感信息的未授权访问、设备配置和网络行为的修改，或设备可用性的中断。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TP-Link Systems Inc. | RE210 AC750 | ≤ 3.14.2 Build 141218 Rel.36430n (EU) |
affected |
≤ 3.14.2 Build 171205 Rel.71984n (US) |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-85384
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
Source: CVE Program / CVE List V5
Vulnerability Description
A stack-based buffer overflow vulnerability exists in the httpd component of RE210 AC750 due to improper bounds checking in the splitString function when processing an uploaded configuration file. An authenticated attacker on the local network can upload a crafted configuration file to trigger the overflow, leading to remote code execution.
Successful exploitation may allow unauthorized access to sensitive information, modification of device configuration and network behavior, or disruption of device availability.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
栈缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TP-Link Systems Inc. | RE210 AC750 | 0 ~ 3.14.2 Build 141218 Rel.36430n (EU) | - |
|
II. Public POCs for CVE-2026-85384
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-85384
请登录查看更多情报信息。
Vendor Pages for CVE-2026-85384 (1)
IV. Related Vulnerabilities
Same vendor: TP-Link Systems Inc.
-
CVE-2026-18167
Stack-based buffer overflow in TP-Link Archer AX55 v4 -
CVE-2026-18330
Hardcoded Shared RSA-1024 Private Key in TP-Link Archer AX55 -
CVE-2026-75118
http_gdpr_decrypt Pre-Authentication Stack-Based Buffer Over -
CVE-2026-76784
Insufficient Cryptographic Protections in Local Device Commu -
CVE-2026-78541
Command Injection in Parent Control of TP-Link Archer BE3600
Same weakness: CWE-121
-
CVE-2026-83990
Microsoft Graphics Component Elevation of Privilege Vulnerab -
CVE-2026-81953
Microsoft Excel Remote Code Execution Vulnerability -
CVE-2026-81388
Microsoft Excel Remote Code Execution Vulnerability -
CVE-2026-81396
Microsoft Excel Remote Code Execution Vulnerability -
CVE-2026-73006
DirectWrite Remote Code Execution Vulnerability
V. Comments for CVE-2026-85384
No comments yet