CVE-2026-12339: TL-MR6400 v5.3 0 to before (EU)_1.10.0 0.9.1 v0001.0 Build 260613 RC.76099n; +5 more affected products

Affected technology

TL-MR6400 v5.3 · 0 to before (EU)_1.10.0 0.9.1 v0001.0 Build 260613 RC.76099n
TP-Link Systems Inc.

Archer MR600 v2 · 0 to before (EU)_1.10.0 0.9.1 v0001.0 Build 260618 RC.40417n
TP-Link Systems Inc.

Archer MR200 v7 · 0 to before (EU)_1.3.0 0.9.1 v0001.0 Build 260605 Rel.57870n
TP-Link Systems Inc.

TL-MR6400 v8.0 · 0 to before (EU)_1.5.0 0.9.1 v0001.0 Build 260610 Rel.67978n
TP-Link Systems Inc.

TL-MR150 v3.20 · 0 to before (EU)_1.3.0 0.9.1 v0001.0 Build 260720 Rel.59727n
TP-Link Systems Inc.

TL-MR100 v3.20 · 0 to before (EU)_1.3.0 0.9.1 v0001.0 Build 260609 Rel.49957n, 0 to before 1.1.0 0.9.1 v0001.0 Build 260609 Rel35479n,  Customized Software for South Korea KT, 0 to before 1.2.0 0.9.1 v0001.0 Build 260609 Rel.36250n, Customized Software for South Korea Telenor
TP-Link Systems Inc.

Component: Not specified by the source

Attack conditions (Source advisory, CVSS 4.0): Adjacent network · High privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 6.9/10) rates confidentiality impact as none; integrity impact as high; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.