Linksys MX4200 Schwachstellen (CVE)

Für Linksys MX4200 veröffentlichte CVE-Einträge, neueste zuerst. Folgen Sie, um bei neuen Einträgen eine E-Mail zu erhalten.

6 Ergebnisse
7.5Hoch
CVE-2026-27850

Improper verification in Linksys MR9600, Linksys MX4200

Linksys MR9600; Linksys MX4200

Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network. This issue affects MR9600: 1.0.4.205530; MX4200…

9.8Kritisch
CVE-2026-27849

Missing neutralization in Linksys MR9600, Linksys MX4200

Linksys MR9600; Linksys MX4200

Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.1…

9.8Kritisch
CVE-2026-27848

Missing neutralization in Linksys MR9600, Linksys MX4200

Linksys MR9600; Linksys MX4200

Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

9.8Kritisch
CVE-2026-27847

Missing authentication in Linksys MR9600, Linksys MX4200

Linksys MR9600; Linksys MX4200

Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use th…

6.2Mittel
CVE-2026-27846

Missing authentication in Linksys MR9600, Linksys MX4200

Linksys MR9600; Linksys MX4200

Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network  to gain access to sensitive information, including the password for admin access to the web interface and t…

6.6Mittel
CVE-2026-25603

Path Traversal vulnerability in Linksys MR9600, Linksys MX4200

Linksys MR9600; Linksys MX4200

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the exe…