PT-2026-21778 · Linksys · Linksys Mr9600+1

Christian Zä​Ske · Publicado 2026-02-24 · Atualizado 2026-02-26 · CVE-2026-25603

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Média

Vetor base

AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linksys MR9600 version 1.0.4.205530 Linksys MX4200 version 1.0.13.210200

Description A path traversal issue exists in Linksys MR9600 and MX4200 devices. This allows the contents of a USB drive partition to be mounted in an arbitrary location within the file system. Successful exploitation may lead to the execution of shell scripts with root privileges.

Recommendations Linksys MR9600 version 1.0.4.205530: At the moment, there is no information about a newer version that contains a fix for this vulnerability. Linksys MX4200 version 1.0.13.210200: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-25603

Produtos afetados

Linksys Mr9600

Linksys Mx4200

Referências · 7

• 🔥 https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-001.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-25603 · Nota de Segurança
• https://t.me/CVEtracker/45629 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2026-25603 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2026371442086912017 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2026676441820307957 · Publicação no Twitter
• https://t.me/cveNotify/153356 · Publicação no Telegram