Medium severityNVD Advisory· Published Sep 10, 2026

CVE-2026-76653

Description

A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modify VPN configuration information without valid credentials.

Successful exploitation may allow a remote unauthenticated attacker to disclose and modify VPN configuration information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

TP-Link/Archer MR600llm-fuzzy
Range: v2, v3 & v5
TP-Link/TL-MR6400llm-fuzzy
Range: v8

Patches

Vulnerability mechanics

References

www.tp-link.com/en/support/download/archer-mr600/v5/nvd
www.tp-link.com/en/support/download/tl-mr6400/v8/nvd
www.tp-link.com/us/support/faq/5292/nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000