ByteOS Network

NVD Vulnerability Details :

CVE-2026-25603

Awaiting Analysis

Source-a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Published At-24 Feb, 2026 | 18:29

Updated At-24 Feb, 2026 | 21:52

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the execution of shell scripts in the context of a root user.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	6.6	MEDIUM	CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 6.6

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses

CWE ID	Type	Source
CWE-22	Secondary	a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

CWE ID: CWE-22

Type: Secondary

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

References

Hyperlink	Source	Resource
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-001.txt	a6d3dc9e-0591-4a13-bce7-0f5b31ff6158	N/A

Hyperlink: https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2025-001.txt

Source: a6d3dc9e-0591-4a13-bce7-0f5b31ff6158

Resource: N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History