Skip to content
Threat Feed
Subscribe

Vendor

Linksys

8 briefs RSS
critical advisory

Linksys Routers: Remote administrative privilege escalation

A critical, unpatched vulnerability in Linksys routers allows remote, unauthenticated attackers to escalate privileges to administrator, disclose sensitive information, manipulate files, or trigger a denial-of-service.

Linksys Router vulnerability network-security
1t
critical advisory

Linksys E8450: Stack-based buffer overflow in portal.cgi (CVE-2026-120283)

A stack-based buffer overflow vulnerability has been identified in the Linksys E8450 (firmware 1.2.00.360516) within the hidden_timezone argument of /www/cgi-bin/portal.cgi.

E8450
1c
high advisory

Linksys WAG200G: OS command injection via setup.cgi (CVE-2013-20007)

Linksys WAG200G firmware versions through 1.01.06 contain an OS command injection vulnerability in the timer_interval parameter that allows authenticated attackers to execute arbitrary system commands via crafted POST requests.

WAG200G
1c
critical threat

Remote Stack-Based Buffer Overflow in Linksys E1700

The Linksys E1700 router (v1.0.0.4.003) is vulnerable to a remote stack-based buffer overflow in the Mac Filter component, allowing for potential unauthenticated remote code execution.

exploited E1700 remote-code-execution buffer-overflow network-device cve-2026-108892 vulnerability network-security
2t 1c
critical threat

OS Command Injection in Linksys RE7000 Range Extender

An OS command injection vulnerability (CVE-2026-86299) in the Linksys RE7000 version 2.0.15 allows unauthenticated remote code execution via the PingTest Handler component.

exploited RE7000 vulnerability rce network-security
1r 1t 1c
high advisory

Unauthenticated OS Command Injection in Linksys E1200

Linksys E1200 routers running firmware v2.0.04 and earlier are vulnerable to unauthenticated remote command execution via the tmUnblock.cgi endpoint.

E1200 webapps cve-2025-60689 command-injection
1r 2t 1c
critical advisory

Linksys MR9600 Command Injection Vulnerability (CVE-2026-6992)

CVE-2026-6992 is a command injection vulnerability in the Linksys MR9600 router that allows remote attackers to execute arbitrary OS commands by manipulating the 'pin' argument in the BTRequestGetSmartConnectStatus function.

MR9600 cve-2026-6992 command-injection router rce
2r 2t 1c
critical advisory

Linksys E1200 Authenticated Stack Buffer Overflow

A stack buffer overflow vulnerability in Linksys E1200 firmware version 2.0.04 and earlier allows an authenticated attacker to achieve remote code execution by sending a crafted HTTP POST request to the apply.cgi endpoint.

E1200 Firmware buffer-overflow rce hardware
2r 1t 1c