CVE-2026-6992

HighCVSS 7.2/10Last modified Oct 26, 2026

Description

A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77CWE-78

Affected software

VendorProductVersions
LinksysMR96002.0.6.206937

References

Timeline

Published
Apr 25, 2026
Last modified
Oct 26, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-699217.8Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.CVE-2026-699226.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.CVE-2026-699237.8Uncontrolled search path element in Windows AI allows an authorized attacker to elevate privileges locally.CVE-2026-699267.8Access of resource using incompatible type ('type confusion') in Desktop Window Manager allows an authorized attacker to elevate privileges CVE-2026-699297.5Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.CVE-2026-69935.3A security flaw has been discovered in go-kratos kratos up to 2.9.2. This impacts the function NewServer of the file transport/http/server.gCVE-2026-699307.5Out-of-bounds read in Windows DHCP Server allows an unauthorized attacker to disclose information over a network.CVE-2026-699317.0Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Storage allows an authorized attackerCVE-2026-699347.8Integer overflow or wraparound in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.CVE-2026-699357.0Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.CVE-2026-69946.3A weakness has been identified in Envoy up to 1.33.0. Affected is the function params.add of the file source/extensions/filters/http/header_CVE-2026-699406.5Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network.
CVE-2026-6992: High severity, CVSS 7.2 | Vulnix