{"id":"CVE-2026-76653","title":"A missing\nauthentication vulnerability in the VPN configuration management has been\nidentified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker\nmay be able to access and mod…","summary":"A missing\nauthentication vulnerability in the VPN configuration management has been\nidentified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker\nmay be able to access and mod…","severity":"medium","cvss":5.3,"cvssVector":"CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N","cwe":["CWE-126"],"vendor":"TP-Link Systems Inc.","product":"TL-MR6400 v8","affected":["tl-mr6400_v8 < 1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978n","archer_mr600 >= v3 < MR600(EU)_V3_1.4.0 Build 260827","archer_mr600 >= v2 < MR600(EU)_V2_1.12.0 Build 2600826"],"published":"2026-09-10","updated":"2026-09-11","sourceUpdated":"2026-09-11T15:21:12.850","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-76653","references":[{"url":"https://www.tp-link.com/en/support/download/archer-mr600/v5/#Firmware","label":"f23511db-6c3e-4e32-a477-6aa17d310630"},{"url":"https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware","label":"f23511db-6c3e-4e32-a477-6aa17d310630"},{"url":"https://www.tp-link.com/us/support/faq/5292/","label":"f23511db-6c3e-4e32-a477-6aa17d310630"}],"tags":["nvd","cve.org"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T20:27:12.333163Z"},"cvssSource":"cna","ingestedAt":"2026-09-13T18:56:50.864Z","epss":0.00299,"epssPercentile":0.22708,"slug":"CVE-2026-76653","body":"## Overview\n\nA missing\nauthentication vulnerability in the VPN configuration management has been\nidentified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker\nmay be able to access and modify VPN configuration information without valid\ncredentials.\n\n\n\n\n\n\n\n\n\nSuccessful\nexploitation may allow a remote unauthenticated attacker to disclose and modify\nVPN configuration information.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":29,"depthScoreParts":{"impact":29.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}