# CVE-2026-8619: TP-Link 4G/LTE router denial of service via malformed HTTP request

Source: https://junglewise.ai/threats/cve-2026-8619-tp-link-4g-lte-router-denial-of-service-via-malformed-http-request  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-08-20. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-8619 · Severity: high · CVSS 7.5 · Published 2026-08-20

TP-Link manufactures a family of 4G/LTE routers widely used in homes and small offices to provide wireless connectivity. A remote attacker on the local network can send a specially crafted HTTP request to crash the router's web management service, temporarily disabling access to the device's configuration interface and any HTTP-dependent functionality. The router must be restarted to restore service.

Technologies: [TP-Link Archer MR600](https://junglewise.ai/threats/technologies/archer-mr600), [TP-Link TL-MR6400](https://junglewise.ai/threats/technologies/tl-mr6400). Vendors: [TP-Link](https://junglewise.ai/threats/vendors/tp-link).

## Quick answers

**Is CVE-2026-8619 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-8619 being exploited in the wild.

**How severe is CVE-2026-8619?** High severity, with a CVSS score of 7.5, published 20 August 2026.

**Which products and versions are affected?** TP-Link Archer MR600 v2; TP-Link Tl-Mr100 v3.2; TP-Link Tl-Mr150 v3.2; TP-Link TL-MR6400 v8.0.

**Is there a fix for CVE-2026-8619?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-8619 attacked?** It is attacked from the adjacent network or over the network, in a network appliance.

**Am I affected by CVE-2026-8619?** Check whether you run TP-Link Archer MR600, TP-Link Archer Mr600 Firmware, TP-Link Tl-Mr100 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

This vulnerability is a NULL pointer dereference in the HTTP service component of TP-Link 4G/LTE routers, caused by improper handling of exceptional or malformed request conditions. The attack vector is network-adjacent (attacker must be on the same local network segment as the target router). No authentication is required; an unauthenticated attacker can send a specially crafted HTTP request to trigger the crash. Successful exploitation causes the HTTP daemon to crash, rendering the web management interface and any HTTP-dependent features temporarily unavailable until the service is manually restarted or the device reboots. Patch availability for these specific firmware versions has not been disclosed in the advisory.

## Affected products

- TP-Link TL-MR100 v3.2
- TP-Link TL-MR150 v3.2
- TP-Link TL-MR6400 v8.0
- TP-Link Archer MR600 v2

## Timeline

- 2026-08-20: disclosed

## References

- [https://www.tp-link.com/en/support/download/archer-mr600/v2/](https://www.tp-link.com/en/support/download/archer-mr600/v2/)
- [https://www.tp-link.com/en/support/download/tl-mr100/v3.20/](https://www.tp-link.com/en/support/download/tl-mr100/v3.20/)

## Related threats

- [TP-Link Archer MR600 and TL-MR6400 authentication bypass in VPN configuration](https://junglewise.ai/threats/cve-2026-76653-tp-link-archer-mr600-and-tl-mr6400-authentication-bypass-in-vpn)
- [TP-Link Archer MR600 and TL-MR6400 directory traversal in file upload](https://junglewise.ai/threats/cve-2026-76652-tp-link-archer-mr600-and-tl-mr6400-directory-traversal-in-file)
- [TP-Link TL-MR100 pre-authentication stack buffer overflow in http_gdpr_decrypt](https://junglewise.ai/threats/cve-2026-75118-tp-link-tl-mr100-pre-authentication-stack-buffer-overflow-in-http)
- [TP-Link TL-MR6400 v7 stack-based buffer overflow in login handler](https://junglewise.ai/threats/cve-2026-17252-tp-link-tl-mr6400-v7-stack-based-buffer-overflow-in-login-handler)
- [TP-Link TL-MR6400 NULL pointer dereference in HTTP parsing](https://junglewise.ai/threats/cve-2026-17251-tp-link-tl-mr6400-null-pointer-dereference-in-http-parsing)