Vulnerabilities

TI-2025-21022 CVE-2025-29229 · GHSA-jm39-xxq9-92r7

linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.

HIGH 82

linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01272 Published 2025-12-23 No fix listed CWE-77

TI-2025-21021 CVE-2025-29228 · GHSA-7p6v-69h6-w53j

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

HIGH 82

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01272 Published 2025-12-23 No fix listed CWE-77

TI-2025-21024 CVE-2025-29231 · GHSA-jxcc-3925-qj53

A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys…

LOW 26

A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hostname and domai…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00188 Published 2025-12-16 No fix listed CWE-79

TI-2025-08385 CVE-2025-9146 · GHSA-9j2h-mcj7-4233

Linksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryption

HIGH 68

A flaw has been found in Linksys E5600 1.1.0.26.

CVSS 4.0HIGH 7.5 Network High privileges No interaction EPSS 0.00553 Published 2025-08-19 No fix listed CWE-310

TI-2025-28791 CVE-2025-45491 · GHSA-33xq-rr72-hjfj

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in…

HIGH 82

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01886 Published 2025-05-06 No fix listed CWE-78

TI-2025-28790 CVE-2025-45490 · GHSA-phr9-h376-r6rq

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in…

HIGH 82

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01751 Published 2025-05-06 No fix listed CWE-77

TI-2025-28789 CVE-2025-45489 · GHSA-6p4m-rffq-g464

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in…

HIGH 82

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01751 Published 2025-05-06 No fix listed CWE-77

TI-2025-28788 CVE-2025-45488 · GHSA-3864-88qj-q5jc

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in…

HIGH 82

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11671 Published 2025-05-06 No fix listed CWE-77

TI-2025-28787 CVE-2025-45487 · GHSA-698f-5447-3h5r

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in…

HIGH 82

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.11561 Published 2025-05-06 No fix listed CWE-77

TI-2025-21023 CVE-2025-29230 · GHSA-qhq3-7wmm-8wm6

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in…

HIGH 76

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.emailReg function.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00791 Published 2025-03-21 No fix listed CWE-77

TI-2025-21020 CVE-2025-29227 · GHSA-h7hj-32w5-2fcq

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command…

MEDIUM 61

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["pkgsize"] parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00677 Published 2025-03-21 No fix listed CWE-77

TI-2025-21019 CVE-2025-29226 · GHSA-9xhf-3wg6-87r4

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command…

MEDIUM 61

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["count"] parameter.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0067 Published 2025-03-21 No fix listed CWE-77

TI-2025-21018 CVE-2025-29223 · GHSA-hpf9-v5mf-fx95

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via…

MEDIUM 61

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the pt parameter in the traceRoute function.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.0067 Published 2025-03-21 No fix listed CWE-77

TI-2025-16817 CVE-2025-22997 · GHSA-8cxq-j8f9-28r7

A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver.

CVSS 3.1MEDIUM 4.8 Adjacent network Low privileges User interaction EPSS 0.00318 Published 2025-01-14 No fix listed CWE-79

TI-2025-16816 CVE-2025-22996 · GHSA-f2q7-hmv9-hgpp

A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of…

MEDIUM 55

A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of Linksys E5600 Router Ver.

CVSS 3.1MEDIUM 4.8 Adjacent network Low privileges User interaction EPSS 0.00318 Published 2025-01-14 No fix listed CWE-79

TI-2023-14211 CVE-2023-30305

An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions…

LOW 39

An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00421 Published 2024-05-28 No fix listed

TI-2024-22304 CVE-2024-33788 · GHSA-7pjp-mg36-54v4

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via…

HIGH 70

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01948 Published 2024-05-06 No fix listed CWE-77

TI-2024-22305 CVE-2024-33789 · GHSA-fj57-wwj6-8p79

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via…

MEDIUM 53

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02383 Published 2024-05-03 No fix listed CWE-77

Vulnerabilities

Filters