CVE-2026-1668

EIP tracks 1 public exploit for CVE-2026-1668. PoCs published by tangrs.

AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2026-1668, targeting a stack-based buffer overflow in a MIPS-based firmware for TP-Link switches. The exploit includes a custom payload that binds a shell to port 8888, demonstrating remote code execution.

The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests. Under specific conditions, this flaw may result in unintended command execution.<br>An unauthenticated attacker with network access to the affected interface may cause memory corruption, service instability, or information disclosure. Successful exploitation may allow remote code execution or denial-of-service.