Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user.
This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 25 Feb 2026 15:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200. | |
| Title | Missing neutralization in Linksys MR9600, Linksys MX4200 | |
| Weaknesses | CWE-78 | |
| References |
|
Projects
Sign in to view the affected projects.
MITRE
Status: PUBLISHED
Assigner: ENISA
Published:
Updated: 2026-02-25T15:15:16.186Z
Reserved: 2026-02-24T07:07:48.974Z
Link: CVE-2026-27848
Vulnrichment
No data.
NVD
Status : Received
Published: 2026-02-25T16:23:29.037
Modified: 2026-02-25T16:23:29.037
Link: CVE-2026-27848
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses