Skip to main content
IMMUNITYSEC

CVE-2026-4558

Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection

9.0
HIGH
CVSS 2.0
EPSS 7.8% · 94th pctCWE-78CWE-77
2026-03-22•Updated 2026-03-23

Description

A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument configApSsid/configApPassphrase/srpLogin/srpPassword can lead to os command injection. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

CVSS 4.0 · CNA8.7 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
CVSS 3.1 · CNA8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
CVSS 3.0 · CNA8.8 HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R
CVSS 2.0 · CNA9 HIGH
AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR
SSVC · CISA-ADP
Exploitationpoc
Automatableno
Technical impacttotal

Affected Products

VendorProductAffected versions
LinksysMR9600
2.0.6.206937

References

5 Links

Record Details

Published
2026-03-22
Last updated
2026-03-23
Assigner (CNA)
VulDB
Credited to
wuuu (VulDB User); VulDB

More from Linksys

CVE-2026-69928.6

Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection

Related Tool Categories

Tool categories that test for or protect against this vulnerability class.

CVE record data © The MITRE Corporation, used under the CVE Terms of Use. Exploited-in-the-wild data from the CISA Known Exploited Vulnerabilities catalog (CC0). Exploit prediction scores by FIRST EPSS (first.org/epss). This site is not endorsed or certified by MITRE, NVD, CISA, or FIRST.