CVE-2022-26987

PoC —

CVSS 3.1

7.8 high

EPSS

1%p71

Published

May 10, 2022 (May 10, 2022)

Modified

Jul 9, 2026

Description

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MmtAtePrase` function. Local users could get remote code execution.

Vendors: tp-link mercusys fastcom
Products: tl-wdr7660 firmware, tl-wdr7661 firmware, tl-wdr7620 firmware, tl-wdr5660 firmware, mercury d196g firmware, fac1900r firmware
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news0 stories

No ingested article mentions this CVE yet.