GCVE - cpe:2.3:o:linksys:mr9600_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:linksys:mr9600_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Linksys (`6d3f2e7c-48a8-5a19-9a98-85960b5ae3c2`)
Product	Mr9600 Firmware (`9a4b130e-597b-59fc-ab1e-d1ac7dd52e74`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-6992`	vulnerable	2026-06-08 08:07:05.242020	Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection HIGH (7.2) A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-04-25T18:00:20.422Z Updated: 2026-04-27T13:34:09.962Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/359544 https://vuldb.com/vuln/359544/cti https://vuldb.com/submit/797086 https://github.com/utmost3/cve/issues/2 https://www.linksys.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4558`	vulnerable	2026-06-08 08:05:13.529115	Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection HIGH (8.8) A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument configApSsid/configApPassphrase/srpLogin/srpPassword can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-22T17:29:35.187Z Updated: 2026-03-23T16:06:52.992Z Open on db.gcve.eu Reference links https://vuldb.com/?id.352385 https://vuldb.com/?ctiid.352385 https://vuldb.com/?submit.775036 https://github.com/utmost3/cve/issues/1 https://www.linksys.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24372`	vulnerable	2026-06-08 05:41:00.198385	Details available Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share. Published: 2022-04-27T17:23:41.000Z Updated: 2024-08-03T04:07:02.428Z Open on db.gcve.eu Reference links https://www.linksys.com/mesh-routers/linksys-dual-band-mesh-wifi-6-router-mr9600/p/p-mr9600/ https://www.linksys.com/de/linksys-dual-band-mesh-wifi-6-router-mr9600/p/p-mr9600/ https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-046.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.