Path Traversal in Linksys Mr9600
CVE-2026-25603
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This m…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.000 (14.6th percentile) — read the EPSS interpretation.
Affected products
- Linksys Mr9600 — versions 1.0.4.205530
- Linksys Mx4200 — versions 1.0.13.210200