TP Link Systems Inc. Deco M9 Plus V2

• CVE-2026-8618 High 7.7 Pre-Authentication Stack-based Buffer Overflow Remote Code Execution in TDDPv2 Subtype 0x91 on Deco M9 Plus 0.3%
• CVE-2026-17176 High 7.7 OS Command Injection Vulnerability in Deco Devices 15.0%