Linksys MR9600 Router Vulnerability Allows Code Execution

CERT-Bund has issued a security advisory (WID-SEC-2026-0814) concerning a critical vulnerability in the Linksys MR9600 Router, specifically affecting firmware version 2.0.6.206937. The vulnerability, rated with a CVSS Base Score of 8.8, allows a remote, authenticated attacker to execute arbitrary code on the affected device. This poses a significant risk to both private users and small businesses that utilize this router.

While no specific mitigation is provided in the advisory, users of the Linksys MR9600 Router should be aware of this vulnerability. Given the high severity and the potential for code execution, affected users should consider updating their router firmware as soon as a patch becomes available or explore alternative security measures. The advisory does not specify a compliance deadline, but prompt action to address the vulnerability is recommended to prevent potential compromise.