CVE-2026-27849

creationtimestamp| type| source ---|---|--- 2026-02-26 18:22:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrsubx4wo25 2026-02-26 18:22:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfrsumlpoo2s...

CVE-2026-27849

Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network. This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200...