GHSA-gx83-77h4-7838High
A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v5...
🔗 CVE IDs covered (1)
📋 Description
A command Injection vulnerability exists in the WireGuard client configuration of Archer MR600 v5 due to improper neutralization of user-controlled input within the web management interface. An authenticated attacker with administrative privileges may be able to execute arbitrary commands when applying configuration changes.Successful exploitation may result in a full compromise of confidentiality, integrity, and availability of the affected device.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-8913
- https://www.tp-link.com/en/support/download/archer-mr600/v5/#Firmware
- https://www.tp-link.com/jp/support/download/archer-mr600/v5/#Firmware
- https://www.tp-link.com/us/support/faq/5122
- https://www.tp-link.com/en/support/download/archer-mr600/v2/#Firmware
- https://www.tp-link.com/en/support/download/archer-mr600/v3/#Firmware
- https://github.com/advisories/GHSA-gx83-77h4-7838