Not scored
CVE-2025-14756
Authenticated Command Injection Vulnerability in Archer MR600
TP-Link Systems Inc.Archer MR600 v5.0
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
2.8%probability of exploitation in the next 30 days
Higher than 86% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Command injection vulnerability was found in the admin interface component of TP-Link Archer MR600 v5 firmware, allowing authenticated attackers to execute system commands with a limited character length via crafted input in the browser developer console, possibly leading to service disruption or full compromise.
Coverage 1 article · 1 outlet
- Router Takeover: High-Severity Command Injection Flaw Hits TP-Link Archer MR600SecurityOnline · first in our coverage