CVE-2026-85384 Details

A stack-based buffer overflow vulnerability has been identified in the httpd component of the TP-Link RE210 AC750 router. This vulnerability arises from inadequate bounds checking in the splitString function when handling uploaded configuration files. An authenticated attacker on the local network can exploit this flaw by uploading a specially crafted configuration file, triggering the buffer overflow and potentially leading to remote code execution. Successful exploitation could allow unauthorized access to sensitive information, unauthorized modifications to device settings and network behavior, or cause disruptions in device availability.