Skip to content
Critical Command Injection Vulnerability in TP-Link Archer MR600 Router

Critical Command Injection Vulnerability in TP-Link Archer MR600 Router

First seen 28 Jan 2026, 18:08 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A command injection vulnerability has been found in TP-Link’s Archer MR600 v5 router, allowing authenticated attackers to execute arbitrary commands via the admin interface. This flaw, identified as CVE-2025-14756, poses a serious security risk for both enterprises and individual users relying on this router model.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 210d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track CVE-2025-14756 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed