Archer Mr600 Firmware vulnerabilities

2 known vulnerabilities in Archer Mr600 Firmware from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  TL-MR100 v3.2: NULL Pointer Dereference

  CVE-2026-8619Aug 20, 2026TP-Link

  An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote atta

• 8.8 High severity

  Archer MR600 v5.0: Improper Neutralization of Special Elements used in a Command

  CVE-2025-14756Jan 26, 2026TP-LinkEPSS 2.77%

  Command injection vulnerability was found in the admin interface component of TP-Link Archer MR600 v5 firmware, allowing authenticated attackers to execute system commands with a limited character length via crafted input in the browser developer console, poss