Path Traversal in Tp-link Systems Inc. Archer Mr200 V7
CVE-2026-12339
A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successf…
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Tp-link Systems Inc. Archer Mr200 V7 — versions 0
- Tp-link Systems Inc. Archer Mr600 V2 — versions 0
- Tp-link Systems Inc. Tl-mr6400 V5.3 — versions 0
Weakness classification (CWE)
References
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (patch)
- f23511db-6c3e-4e32-a477-6aa17d310630 (vendor-advisory)