CVE-2026-75118 | TP-Link TL-MR100 up to 3.20 GDPR Decrypt /cgi/login http_gdpr_decrypt stack-based overflow

August 28, 2026 Yanac

A vulnerability labeled as very critical has been found in TP-Link TL-MR100 up to 3.20. The affected element is the function http_gdpr_decrypt of the file /cgi/login of the component GDPR Decrypt. Executing a manipulation can lead to stack-based buffer overflow.

This vulnerability is tracked as CVE-2026-75118. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More