What is GHSA-4rwx-9hrf-jj43?

GHSA-4rwx-9hrf-jj43 is a security advisory published by GitHub Security Advisories with Medium severity. A missing authentication vulnerability in the VPN configuration management has been identified in...

Which CVE IDs does GHSA-4rwx-9hrf-jj43 cover?

GHSA-4rwx-9hrf-jj43 covers the following CVE IDs: CVE-2026-76653. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-4rwx-9hrf-jj43Medium

A missing authentication vulnerability in the VPN configuration management has been identified in...

Vendor

GitHub Security Advisories

Published

September 10, 2026

Last Modified

September 10, 2026

🔗 CVE IDs covered (1)

CVE-2026-76653 →

📋 Description

A missing authentication vulnerability in the VPN configuration management has been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8 due to improper access control; a remote unauthenticated attacker may be able to access and modify VPN configuration information without valid credentials.

Successful exploitation may allow a remote unauthenticated attacker to disclose and modify VPN configuration information.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-76653
https://www.tp-link.com/en/support/download/archer-mr600/v5/#Firmware
https://www.tp-link.com/en/support/download/tl-mr6400/v8/#Firmware
https://www.tp-link.com/us/support/faq/5292
https://github.com/advisories/GHSA-4rwx-9hrf-jj43