CVE-2026-27846 Missing authentication in Linksys MR9600, Linksys MX4200

Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network to gain access to sensitive information, including the password for admin access to the web interface and the Wi-Fi passwords.This issue affects...

CVE-2026-27846

The CVE-2026-27846 entry affects Linksys MR9600 (firmware 1.0.4.205530) and MX4200 (firmware 1.0.13.210200). The root cause is missing authentication enabling a physically proximate user to misuse the mesh functionality to add a new mesh device, leading to exposure of sensitive data such as the a...

CVE-2023-28114

cilium-cli is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,cilium-cli, when used to configure cluster mesh functionality, can remove the enforcement of user permissions on the etcd store used to mirror local cluster...