Is CVE-2026-3841 actively exploited?

No active exploitation of CVE-2026-3841 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-3841 be exploited remotely?

Partially. CVE-2026-3841 requires adjacent network access (same network segment) to exploit.

What is the CVSS score of CVE-2026-3841?

CVE-2026-3841 has a CVSS score of 8.5 (HIGH).

HOME VULNERABILITIESCVE-2026-3841

HIGH

CVE-2026-3841

CWE-78Published: March 12, 2026· Updated: Mar 12, 2026

8.5

CVSS v3.1

EPSS:0.47%probability of exploitation in 30 daysPercentile:64.4th

Official Description

A command injection vulnerability has been identified in the Telnet command-line interface (CLI) of TP-Link TL-MR6400 v5.3. This issue is caused by insufficient sanitization of data processed during specific CLI operations. An authenticated attacker with elevated privileges may be able to execute arbitrary system commands. Successful exploitation may lead to full device compromise, including potential loss of confidentiality, integrity, and availability.

NVD Source

Technical Analysis

CVE-2026-3841 requires adjacent network access, limiting remote exploitation but still posing risk in shared or local network environments.

Exploitation requires high privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability

Attack VectorAdjacent

Attack ComplexityLow

Privileges Req.High

User InteractionNone

ScopeX

Impact

Confidentiality

Integrity

Availability

CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X