CVE-2026-6992: Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/runcentral2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-6992?
CVE-2026-6992 is classified as a high severity vulnerability due to the potential for OS command injection.
How do I fix CVE-2026-6992?
To fix CVE-2026-6992, update the Linksys MR9600 to the latest firmware version that addresses this vulnerability.
What component is affected by CVE-2026-6992?
CVE-2026-6992 affects the function BTRequestGetSmartConnectStatus in the JNAP Action Handler of Linksys MR9600.
What version of Linksys MR9600 is vulnerable to CVE-2026-6992?
The vulnerable version of Linksys MR9600 is 2.0.6.206937.
What are the potential impacts of CVE-2026-6992?
The potential impacts of CVE-2026-6992 include unauthorized execution of commands on the device leading to security breaches.