TI-2026-85142 CVE-2026-121933 · GHSA-rh2v-jr94-g2vf
Linksys E5350 Setup Wizard apply.cgi missing authentication in save_settings
Priority MEDIUM 45
A flaw has been found in Linksys E5350 1.0.00.037.
Vulnerabilities
254 records
TI-2026-85132 CVE-2026-121932 · GHSA-39mv-338q-hv4m
OS command injection in Linksys E5350 via apply.cgi
Priority MEDIUM 47
A vulnerability was detected in Linksys E5350 1.0.00.037.
TI-2026-85129 CVE-2026-121931 · GHSA-7p5v-44wr-v953
OS command injection in Linksys WRT54GL traceroute diagnostic page
Priority MEDIUM 46
A security vulnerability has been detected in Linksys WRT54GL 4.30.18.
TI-2026-85127 CVE-2026-121930 · GHSA-mm59-x26v-4g52
OS command injection in Linksys WRT54GL ping diagnostic
Priority MEDIUM 46
A weakness has been identified in Linksys WRT54GL 4.30.18.
TI-2026-84924 CVE-2026-121618 · GHSA-h638-c7p9-c97g
Information disclosure in Linksys E5600 Factory Quality Control
Priority LOW 32
A weakness has been identified in Linksys E5600 1.1.0.26.
TI-2026-84922 CVE-2026-121617 · GHSA-ch52-qqqr-2wgh
Out-of-bounds write in Linksys E5600 firmware upload parser
Priority LOW 38
A security flaw has been discovered in Linksys E5600 1.1.0.26.
TI-2026-84921 CVE-2026-121616 · GHSA-rqwp-qx4w-fv82
Out-of-bounds write in Linksys E5600 JSON request parser
Priority LOW 30
A vulnerability was identified in Linksys E5600 1.1.0.26.
TI-2026-84920 CVE-2026-121615 · GHSA-4xhr-pc2w-8qx5
Linksys E5600 Login mesh_login.cgi improper authentication
Priority MEDIUM 44
A vulnerability was determined in Linksys E5600 1.1.0.26.
TI-2026-83670 CVE-2026-120283 · GHSA-q5j7-qf5p-p6hv
Stack-based overflow in Linksys E8450 portal.cgi via strcpy
Priority MEDIUM 50
A vulnerability was identified in Linksys E8450 1.2.00.360516.
TI-2013-06226 CVE-2013-20009 · GHSA-x9c2-j44q-2h83
Stored cross-site scripting in Linksys WAG200G policy_name field
Priority MEDIUM 55
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi.
TI-2013-06225 CVE-2013-20008 · GHSA-7fmm-4pgx-vj6h
Linksys WAG200G Admin Password Change Without Current Password
Priority HIGH 66
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password.
TI-2013-06224 CVE-2013-20007 · GHSA-c6xm-fp38-v723
OS command injection in Linksys WAG200G setup.cgi
Priority HIGH 72
Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter.
TI-2026-79143 CVE-2026-114576 · GHSA-w2w5-phf3-47jv
Insufficiently random session values in Linksys RE6250 web interface
Priority MEDIUM 61
A vulnerability has been found in Linksys RE6250 1.0.04.001.
TI-2026-70981 CVE-2026-108896 · GHSA-4jv4-xw7r-ghwf
OS command injection in Linksys E1700 setLinksysIpv6 handler
Priority HIGH 76
A vulnerability was found in Linksys E1700 1.0.0.4.003.
TI-2026-70980 CVE-2026-108895 · GHSA-v6gp-cmwg-49h5
OS command injection in Linksys E1700 setDMZ function
Priority HIGH 76
A weakness has been identified in Linksys E1700 1.0.0.4.003.
TI-2026-70979 CVE-2026-108894 · GHSA-j99r-fjcg-jggx
OS command injection in Linksys E1700 Static Route handler
Priority HIGH 76
A security flaw has been discovered in Linksys E1700 1.0.0.4.003.
TI-2026-70978 CVE-2026-108893 · GHSA-3px7-h6cw-5c93
Stack-based overflow in Linksys E1700 setVlan function
Priority HIGH 76
A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003.
TI-2026-70977 CVE-2026-108892 · GHSA-cgfm-fxm5-56x9
Stack-based buffer overflow in Linksys E1700 Mac Filter
Priority HIGH 82
A vulnerability was determined in Linksys E1700 1.0.0.4.003.
TI-2026-59083 CVE-2026-86299 · GHSA-8gm9-6v5q-x2cp
Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
Priority HIGH 76
A vulnerability was detected in Linksys RE7000 2.0.15.
TI-2026-06120 CVE-2026-6992 · GHSA-fvq2-f7cp-4g2w
Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection
Priority HIGH 72
A vulnerability was identified in Linksys MR9600 2.0.6.206937.
TI-2026-03963 CVE-2026-4558 · GHSA-c659-rvfg-wgf8
Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection
Priority HIGH 73
A flaw has been found in Linksys MR9600 2.0.6.206937.
TI-2026-22200 CVE-2026-27850 · GHSA-j57x-8g4m-v9v5
Improper verification in Linksys MR9600, Linksys MX4200
Priority HIGH 72
Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are normally only accessible through the local network.
TI-2026-22199 CVE-2026-27849 · GHSA-f2jw-4mh9-f63v
Missing neutralization in Linksys MR9600, Linksys MX4200
Priority HIGH 82
Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for configuring devices inside the mesh network.
TI-2026-22198 CVE-2026-27848 · GHSA-qc7c-4556-qm66
Missing neutralization in Linksys MR9600, Linksys MX4200
Priority HIGH 82
Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root user.
TI-2026-22197 CVE-2026-27847 · GHSA-w654-6gvp-6w5j
Missing authentication in Linksys MR9600, Linksys MX4200
Priority HIGH 82
Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection.