GCVE - cpe:2.3:h:linksys:mr9600:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:linksys:mr9600:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Linksys (`6d3f2e7c-48a8-5a19-9a98-85960b5ae3c2`)
Product	Mr9600 (`6570e734-81c4-5045-8f57-65923ee986f9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-6992`	not_vulnerable	2026-06-08 08:07:05.244306	Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection HIGH (7.2) A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-04-25T18:00:20.422Z Updated: 2026-04-27T13:34:09.962Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/359544 https://vuldb.com/vuln/359544/cti https://vuldb.com/submit/797086 https://github.com/utmost3/cve/issues/2 https://www.linksys.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4558`	not_vulnerable	2026-06-08 08:05:13.531675	Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection HIGH (8.8) A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument configApSsid/configApPassphrase/srpLogin/srpPassword can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-22T17:29:35.187Z Updated: 2026-03-23T16:06:52.992Z Open on db.gcve.eu Reference links https://vuldb.com/?id.352385 https://vuldb.com/?ctiid.352385 https://vuldb.com/?submit.775036 https://github.com/utmost3/cve/issues/1 https://www.linksys.com/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-25603`	not_vulnerable	2026-06-08 07:53:20.089438	Path Traversal vulnerability in Linksys MR9600, Linksys MX4200 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the execution of shell scripts in the context of a root user.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200. Published: 2026-02-24T17:14:36.141Z Updated: 2026-02-24T18:13:33.449Z Open on db.gcve.eu Reference links https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-001.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-24372`	not_vulnerable	2026-06-08 05:41:00.199225	Details available Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share. Published: 2022-04-27T17:23:41.000Z Updated: 2024-08-03T04:07:02.428Z Open on db.gcve.eu Reference links https://www.linksys.com/mesh-routers/linksys-dual-band-mesh-wifi-6-router-mr9600/p/p-mr9600/ https://www.linksys.com/de/linksys-dual-band-mesh-wifi-6-router-mr9600/p/p-mr9600/ https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-046.txt	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.