https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 01:49:38 +0000 https://vulnerability.circl.lu/vuln/cve-2026-76652 <p><strong>Affected:</strong> TP-Link Systems Inc. TL-MR6400 v8, TP-Link Systems Inc. Archer MR600</p> <p>An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 &amp; v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory.</p> <p>Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.</p> <p><strong>Affected:</strong> TP-Link Systems Inc. TL-MR6400 v8, TP-Link Systems Inc. Archer MR600</p> <p>An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 &amp; v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory.</p> <p>Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.</p> https://vulnerability.circl.lu/vuln/cve-2026-76652