Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-76652

TL-MR6400 v8 · Vulnerability

CVSS 4.0 4.8 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-76652

Published

An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory. Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-76652

Published

TL-MR6400 v8

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "TL-MR6400 v8",
                    "platforms": [
                        "Linux"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978n",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Archer MR600

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "TP-Link Systems Inc.",
                    "product": "Archer MR600",
                    "platforms": [
                        "Linux"
                    ],
                    "versions": [
                        {
                            "status": "affected",
                            "version": "v3",
                            "lessThan": "MR600(EU)_V3_1.4.0 Build 260827",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "v5",
                            "lessThan": "MR600(EU)_V5_1.9.0 Build 260805",
                            "versionType": "custom"
                        },
                        {
                            "status": "affected",
                            "version": "v2",
                            "lessThan": "MR600(EU)_V2_1.12.0 Build 2600826",
                            "versionType": "custom"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON