Skip to content
OpenAdvisories
High · 7.2 Public exploit CVE-2026-6992 EUVD-2026-25668GHSA-fvq2-f7cp-4g2w

Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection

Published Apr 25, 2026 · Updated Apr 27, 2026 · Assigned by VulDB

Vendor: Linksys Product: MR9600

Description

A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command injection. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products

VendorProductAffectedFixed
Linksys MR9600 2.0.6.206937 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • nicholas-howland/CVE-2026-6992-PoC ★ 0 · Jun 22, 2026

    Vulnerability proof of concept reworked from https://github.com/utmost3/cve/issues/2 I take no credit for discovering the vulnerability. This is for educational and portfolio purposes only.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References