CVE-2026-4558: Improper Neutralization of Special Elements used in an OS Command

A flaw has been found in Linksys MR9600 2.0.6.206937. Affected is the function smartConnectConfigure of the file SmartConnect.lua. Executing a manipulation of the argument configApSsid/configApPassphrase/srpLogin/srpPassword can lead to os command injection. The attack may be launched remotely. T...

Linksys MR9600 操作系统命令注入漏洞

The Linksys MR9600 is a wireless router produced by the American company Linksys. The version 2.0.6.206937 of the Linksys MR9600 has a vulnerability related to operating system command injection. This vulnerability stems from incorrect operations on parameters in the file SmartConnect.lua,...