Linksys MR9600 Firmware vulnerabilities

4 CVEs affecting Linksys MR9600 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-6992, published 2026-04-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-6992, published 2026-04-25. High severity, CVSS 7.2. EPSS: 8% chance of exploitation in the next 30 days. A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler.…
CVE-2026-4558, published 2026-03-22. High severity, CVSS 8.8. EPSS: 7.8% chance of exploitation in the next 30 days. A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument…
CVE-2022-24372, published 2022-04-27. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share.
CVE-2026-25603, published 2026-02-24. Medium severity, CVSS 6.6. EPSS: 0.3% chance of exploitation in the next 30 days. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an…