Medium severity · published Sep 10, 2026
CVE-2026-76653
Missing Authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR600
5.3
CVSS
0.5%
EPSS
No
On KEV
Description
A missing
authentication vulnerability in the VPN configuration management has been
identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker
may be able to access and modify VPN configuration information without valid
credentials.
Successful
exploitation may allow a remote unauthenticated attacker to disclose and modify
VPN configuration information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Archer MR600 · TP-Link Systems Inc.
v3 before MR600(EU)_V3_1.4.0 Build 260827; v2 before MR600(EU)_V2_1.12.0 Build 2600826 · source: vendor
TV
TL-MR6400 v8 · TP-Link Systems Inc.
before 1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978n · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-76653
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-76653
www.tp-link.com
https://www.tp-link.com/en/support/download/archer-mr600/v5/#Firmware
www.tp-link.com
https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware
www.tp-link.com
https://www.tp-link.com/us/support/faq/5292/
More from Archer MR600
4.8
CVE-2026-76652
Authenticated Directory Traversal Vulnerability in File Upload Functionality in TP-Link TL-MR6400 and Archer MR600