CVE-2026-27850 — Improper verification in Linksys MR9600, Linksys MX4200

CVE-2026-27850

Improper verification in Linksys MR9600, Linksys MX4200 PUBLISHED

Description (CNA)

Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Affected (CNA)

Vendor / product	Versions
Linksys / MR9600	affected 1.0.4.205530
Linksys / MX4200	affected 1.0.13.210200

CWE

No CWE identifiers supplied.

References

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-014.txt

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.