Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-27850

Improper verification in Linksys MR9600, Linksys MX4200

Description

Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linksys MR9600

Default version status: affected

  • 1.0.4.205530affected

Linksys MX4200

Default version status: unaffected

  • 1.0.13.210200affected

References