Mr9600 Firmware vulnerabilities

2 known vulnerabilities in Mr9600 Firmware from Linksys. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  MR9600: Improper Neutralization of Special Elements used in a Command

  CVE-2026-6992Apr 25, 2026LinksysEPSS 8.15%

  A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injec

• 8.8 High severity

  MR9600: Improper Neutralization of Special Elements used in a Command

  CVE-2026-4558Mar 22, 2026LinksysEPSS 5.09%

  A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument configApSsid/configApPassphrase/srpLogin/srpPassword can lead to os command injection. T