Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-6992 A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the c… https://www.cve.org/CVERecord?id=CVE-2026-6992
Post summary
A CVE-2026-6992 vulnerability was identified in Linksys MR9600's BTRequestGetSmartConnectStatus function, but the notice includes no details on exploitation, patches, or mitigation.
CVE-2026-6992 Remote Code Execution via OS Command Injection in Linksys MR9600 2... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6992 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The post announces CVE-2026‑6992, a remote code execution vulnerability in Linksys MR9600 routers caused by OS command injection. No exploit details, patches, or active exploitation claims are provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | linksys | mr9600 | - | - | - |
| OS | linksys | mr9600_firmware | 2.0.6.206937 | - | - |