by Kastro
Paper/Archive/CVE-2026-27847

CVE-2026-27847

Linksys MR9600 — Missing authentication in Linksys MR9600, Linksys MX4200

EPSS 0.4%public exploitCVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 30.3.303 × 206.1Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection. This can be used to inject known credentials into the database that can be utilized to successfully complete the handshake and use the protected service. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Affected

ProductAffectedFixed inSource
MR96001.0.4.205530–CNA
MX42001.0.13.210200–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupsyss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-009.txt