TP-Link Archer MR600 Firmware vulnerabilities

2 CVEs affecting TP-Link Archer MR600 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-8619, published 2026-08-20.

More from TP-Link.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-14756, published 2026-01-26. High severity, CVSS 8.8. EPSS: 2.8% chance of exploitation in the next 30 days. Command injection vulnerability was found in the admin interface component of TP-Link Archer MR600 v5 firmware, allowing authenticated attackers to execute system commands with a limited character…
• CVE-2026-8619, published 2026-08-20. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 v3.2, TL-MR150 v3.2, TL-MR6400 v8.0 and Archer MR600 v2, due to improper handling of exceptional request…