Linksys MR9600 vulnerabilities

5 CVEs affecting Linksys MR9600, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-27850, published 2026-02-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-27849, published 2026-02-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh…
CVE-2026-27848, published 2026-02-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user. This issue affects MR9600:…
CVE-2026-27847, published 2026-02-25. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can…
CVE-2026-27850, published 2026-02-25. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the…
CVE-2026-27846, published 2026-02-25. Medium severity, CVSS 6.2. EPSS: 0.2% chance of exploitation in the next 30 days. Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network to gain access to sensitive information,…