Archer MR600 v2 vulnerabilities

2 known vulnerabilities in Archer MR600 v2 from TP-Link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  TL-MR100 v3.2: NULL Pointer Dereference

  CVE-2026-8619Aug 20, 2026TP-Link

  An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request conditions that may lead to a NULL pointer dereference. A remote atta

• 8.5 High severity

  Archer MR600 v5: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-8913Jun 8, 2026TP-LinkEPSS 1.07%

  A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v2, v3, and v5 due to improper neutralization of user-controlled input within the web management interface. An authenticated attacker with administrative privileges