Dashboard / CVE-2026-6992

CVE-2026-6992

HIGH
MEDIUM Priority: 0.59 BB Relevance: 61/100
Published: 2026-04-25 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: X
AT: None
VC: High
VI: High
VA: High

Description

A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
linksys mr9600_firmware 2.0.6.206937

References & Advisories (5)

https://vuldb.com/submit/797086
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359544
Third Party Advisory VDB Entry
https://vuldb.com/vuln/359544/cti
Permissions Required VDB Entry
https://github.com/utmost3/cve/issues/2
Exploit Issue Tracking Third Party Advisory

Bug Bounty Relevance

61 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

7.3 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

8.15%
Raw Score 0.081490
Percentile 94.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.08149
2026-10-28
0.08149

Intelligence Sources

nvd ref →

External Links