Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the execution of shell scripts in the context of a root user.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 4 products
| Date | Total | Labels |
|---|
| 2026-02-24 | 1 | Disclosure1 |
| 2026-02-25 | 1 | General1 |
CVE-2026-25603 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive par… https://www.cve.org/CVERecord?id=CVE-2026-25603
Post summary
The text references CVE-2026-25603, a path traversal vulnerability in Linksys MR9600 and MX4200, but provides no evidence of PoC, exploit, active exploitation, patch, or false positive.
CVE-2026-25603 Path Traversal in Linksys MR9600 and MX4200 Enabling Arbitrary USB Partition Mounting https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25603
Post summary
A path traversal vulnerability (CVE-2026-25603) in Linksys MR9600 and MX4200 routers allows attackers to mount arbitrary USB partitions, as disclosed in the provided vulnerability details.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | linksys | mr9600 | - | - | - |
| OS | linksys | mr9600_firmware | 1.0.4.205530 | - | - |
| HW | linksys | mx4200 | - | - | - |
| OS | linksys | mx4200_firmware | 1.0.4.205530 | - | - |