PT-2026-21968 · Mr9600+1 · Mr9600+1

Christian Zä​Ske · Published 2026-02-25 · Updated 2026-02-26 · CVE-2026-27850

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MR9600 versions 1.0.4.205530 MX4200 versions 1.0.13.210200

Description An improperly configured firewall rule allows connections on the WAN port using source port 5222. This exposes services normally accessible only through the local network.

Recommendations Update MR9600 to a version newer than 1.0.4.205530. Update MX4200 to a version newer than 1.0.13.210200.

Fix

Related Identifiers

CVE-2026-27850

Affected Products

Mr9600

Mx4200

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-27850 · Security Note
• https://twitter.com/CVEnew/status/2027099313076347335 · Twitter Post
• https://syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-014.txt · Note