TP-Link Deco M9 Plus V2 hardware contains critical vulnerabilities that allow for remote command execution and buffer overflows.

🚨 EUVD-2026-91006 📊 Score: 7.7/10 (CVSS v3.1) 📦 Product: Deco M9 Plus V2 🏢 Vendor: TP-Link Systems Inc. 📅 Updated: 2026-10-01 📝 A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-91006 #cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-75886 📊 Score: 7.7/10 (CVSS v3.1) 📦 Product: Deco M9 Plus V2, Deco BE11000 V2 🏢 Vendor: TP-Link Systems Inc. 📅 Published: 2026-09-10 | Updated: 2026-10-01 📝 An OS command injection vulnerability in the TDDP module of Deco BE11000 and Deco M9 Plus allows an adjacent network attacker to execute arbitrary commands with root privileges by sending a crafte... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-75886 #cybersecurity #infosec #euvd #cve #vulnerability