Skip to content
Threat Feed
Subscribe

Vendor

Linksys

4 briefs RSS
critical threat

OS Command Injection in Linksys RE7000 Range Extender

An OS command injection vulnerability (CVE-2026-86299) in the Linksys RE7000 version 2.0.15 allows unauthenticated remote code execution via the PingTest Handler component.

exploited RE7000 vulnerability rce network-security
1r 1t 1c
high advisory

Unauthenticated OS Command Injection in Linksys E1200

Linksys E1200 routers running firmware v2.0.04 and earlier are vulnerable to unauthenticated remote command execution via the tmUnblock.cgi endpoint.

E1200 webapps cve-2025-60689 command-injection
1r 2t 1c
critical advisory

Linksys MR9600 Command Injection Vulnerability (CVE-2026-6992)

CVE-2026-6992 is a command injection vulnerability in the Linksys MR9600 router that allows remote attackers to execute arbitrary OS commands by manipulating the 'pin' argument in the BTRequestGetSmartConnectStatus function.

MR9600 cve-2026-6992 command-injection router rce
2r 2t 1c
critical advisory

Linksys E1200 Authenticated Stack Buffer Overflow

A stack buffer overflow vulnerability in Linksys E1200 firmware version 2.0.04 and earlier allows an authenticated attacker to achieve remote code execution by sending a crafted HTTP POST request to the apply.cgi endpoint.

E1200 Firmware buffer-overflow rce hardware
2r 1t 1c