Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.2

Physical Access to Device Allows Unauthorized Network Access

CVE-2026-27846 · published 8 months ago
Summary

A user with physical access to the device can add a new mesh device to the network without permission, potentially gaining access to sensitive information like admin passwords and Wi-Fi credentials. This could lead to unauthorized access to your network and sensitive data. Update your device to the latest firmware to fix this issue.

Original advisory text
Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network  to gain access to sensitive information, incl...
Due to missing authentication, a user with physical access to the device can misuse the mesh functionality for adding a new mesh device to the network 
to gain access to sensitive information, including the password for admin access to the web interface and the Wi-Fi passwords.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.2 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published25 Feb 2026
Updated26 Oct 2026
First seen6 Mar 2026
Sources
CVE-2026-27846 · NVD
Track software like this
Free during beta