Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service.
This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 25 Feb 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200. | |
| Title | Missing authentication in Linksys MR9600, Linksys MX4200 | |
| Weaknesses | CWE-89 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ENISA
Published:
Updated: 2026-02-25T15:10:30.771Z
Reserved: 2026-02-24T07:07:48.973Z
Link: CVE-2026-27847
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-25T16:23:28.833
Modified: 2026-02-25T16:23:28.833
Link: CVE-2026-27847
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses