# cve.now: Linksys

The newest entries naming Linksys as an affected vendor (up to 200), of 112 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-121933](https://cve.now/CVE-2026-121933.md): Linksys E5350 Setup Wizard apply.cgi save\_settings missing authentication (CVSS 10.0)
- [CVE-2026-121932](https://cve.now/CVE-2026-121932.md): Linksys E5350 apply.cgi system os command injection (CVSS 10.0)
- [CVE-2026-121931](https://cve.now/CVE-2026-121931.md): Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection (CVSS 9.4)
- [CVE-2026-121930](https://cve.now/CVE-2026-121930.md): Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection (CVSS 9.4)
- [CVE-2026-121618](https://cve.now/CVE-2026-121618.md): Linksys E5600 Factory Quality Control fqc.cgi information disclosure (CVSS 6.9)
- [CVE-2026-121617](https://cve.now/CVE-2026-121617.md): Linksys E5600 Header upload\_fw.cgi init\_multipart out-of-bounds write (CVSS 8.7)
- [CVE-2026-121616](https://cve.now/CVE-2026-121616.md): Linksys E5600 JSON Request mesh\_login.cgi strcpy out-of-bounds write (CVSS 6.9)
- [CVE-2026-121615](https://cve.now/CVE-2026-121615.md): Linksys E5600 Login mesh\_login.cgi improper authentication (CVSS 10.0)
- [CVE-2026-120283](https://cve.now/CVE-2026-120283.md): Linksys E8450 portal.cgi strcpy stack-based overflow (CVSS 10.0)
- [CVE-2013-20009](https://cve.now/CVE-2013-20009.md): Linksys WAG200G through 1.01.06 Stored XSS via policy\_name Parameter (CVSS 4.8)
- [CVE-2013-20008](https://cve.now/CVE-2013-20008.md): Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password (CVSS 7.0)
- [CVE-2013-20007](https://cve.now/CVE-2013-20007.md): Linksys WAG200G through 1.01.06 OS Command Injection via timer\_interval in setup.cgi (CVSS 8.6)
- [CVE-2026-114576](https://cve.now/CVE-2026-114576.md): Linksys RE6250 Web Management strcmp random values (CVSS 6.3)
- [CVE-2026-108896](https://cve.now/CVE-2026-108896.md): Linksys E1700 setLinksysIpv6 os command injection (CVSS 9.4)
- [CVE-2026-108895](https://cve.now/CVE-2026-108895.md): Linksys E1700 setDMZ os command injection (CVSS 9.4)
- [CVE-2026-108894](https://cve.now/CVE-2026-108894.md): Linksys E1700 Static Route addStaticRoute os command injection (CVSS 9.4)
- [CVE-2026-108893](https://cve.now/CVE-2026-108893.md): Linksys E1700 setVlan stack-based overflow (CVSS 9.4)
- [CVE-2026-108892](https://cve.now/CVE-2026-108892.md): Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow (CVSS 10.0)
- [CVE-2026-86299](https://cve.now/CVE-2026-86299.md): Linksys RE7000 PingTest json.cgi platform\_event\_pingTest os command injection (CVSS 9.4)
- [CVE-2026-6992](https://cve.now/CVE-2026-6992.md): Linksys MR9600 JNAP Action run\_central2.sh BTRequestGetSmartConnectStatus os command injection (CVSS 8.6)
- [CVE-2026-4558](https://cve.now/CVE-2026-4558.md): Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection (CVSS 8.7)
- [CVE-2026-27850](https://cve.now/CVE-2026-27850.md): Improper verification in Linksys MR9600, Linksys MX4200 (CVSS 7.5)
- [CVE-2026-27849](https://cve.now/CVE-2026-27849.md): Missing neutralization in Linksys MR9600, Linksys MX4200 (CVSS 9.8)
- [CVE-2026-27848](https://cve.now/CVE-2026-27848.md): Missing neutralization in Linksys MR9600, Linksys MX4200 (CVSS 9.8)
- [CVE-2026-27847](https://cve.now/CVE-2026-27847.md): Missing authentication in Linksys MR9600, Linksys MX4200 (CVSS 9.8)
- [CVE-2026-27846](https://cve.now/CVE-2026-27846.md): Missing authentication in Linksys MR9600, Linksys MX4200 (CVSS 6.2)
- [CVE-2026-25603](https://cve.now/CVE-2026-25603.md): Path Traversal vulnerability in Linksys MR9600, Linksys MX4200 (CVSS 6.6)
- [CVE-2025-52692](https://cve.now/CVE-2025-52692.md): Bypass Authentication (CVSS 8.8)
- [CVE-2025-14136](https://cve.now/CVE-2025-14136.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod\_form.so stack-based overflow (CVSS 8.7)
- [CVE-2025-14135](https://cve.now/CVE-2025-14135.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod\_form.so AP\_get\_wired\_clientlist\_setClientsName stack-based overflow (CVSS 8.7)
- [CVE-2025-14134](https://cve.now/CVE-2025-14134.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod\_form.so stack-based overflow (CVSS 8.7)
- [CVE-2025-14133](https://cve.now/CVE-2025-14133.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod\_form.so AP\_get\_wireless\_clientlist\_setClientsName stack-based overflow (CVSS 8.7)
- [CVE-2025-9575](https://cve.now/CVE-2025-9575.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 upload.cgi cgiMain os command injection (CVSS 5.3)
- [CVE-2025-9528](https://cve.now/CVE-2025-9528.md): Linksys E1700 systemCommand os command injection (CVSS 5.1)
- [CVE-2025-9527](https://cve.now/CVE-2025-9527.md): Linksys E1700 QoSSetup stack-based overflow (CVSS 8.7)
- [CVE-2025-9526](https://cve.now/CVE-2025-9526.md): Linksys E1700 setSysAdm stack-based overflow (CVSS 8.7)
- [CVE-2025-9525](https://cve.now/CVE-2025-9525.md): Linksys E1700 setWan stack-based overflow (CVSS 8.7)
- [CVE-2025-9483](https://cve.now/CVE-2025-9483.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 singlePortForwardAdd stack-based overflow (CVSS 8.7)
- [CVE-2025-9482](https://cve.now/CVE-2025-9482.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflow (CVSS 8.7)
- [CVE-2025-9481](https://cve.now/CVE-2025-9481.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflow (CVSS 8.7)
- [CVE-2025-9393](https://cve.now/CVE-2025-9393.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaProfile stack-based overflow (CVSS 8.7)
- [CVE-2025-9392](https://cve.now/CVE-2025-9392.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 qosClassifier stack-based overflow (CVSS 8.7)
- [CVE-2025-9363](https://cve.now/CVE-2025-9363.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portTriggerManageRule stack-based overflow (CVSS 8.7)
- [CVE-2025-9362](https://cve.now/CVE-2025-9362.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 urlFilterManageRule stack-based overflow (CVSS 5.3)
- [CVE-2025-9361](https://cve.now/CVE-2025-9361.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 ipRangeBlockManageRule stack-based overflow (CVSS 8.7)
- [CVE-2025-9360](https://cve.now/CVE-2025-9360.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflow (CVSS 8.7)
- [CVE-2025-9359](https://cve.now/CVE-2025-9359.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_checkCredentialsByBBS stack-based overflow (CVSS 8.7)
- [CVE-2025-9358](https://cve.now/CVE-2025-9358.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setSysAdm stack-based overflow (CVSS 8.7)
- [CVE-2025-9357](https://cve.now/CVE-2025-9357.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchByBBS stack-based overflow (CVSS 8.7)
- [CVE-2025-9356](https://cve.now/CVE-2025-9356.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 inboundFilterAdd stack-based overflow (CVSS 8.7)
- [CVE-2025-9355](https://cve.now/CVE-2025-9355.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 scheduleAdd stack-based overflow (CVSS 8.7)
- [CVE-2025-9253](https://cve.now/CVE-2025-9253.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_doSpecifySiteSurvey stack-based overflow (CVSS 8.7)
- [CVE-2025-9252](https://cve.now/CVE-2025-9252.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DisablePasswordAlertRedirect stack-based overflow (CVSS 8.7)
- [CVE-2025-9251](https://cve.now/CVE-2025-9251.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 sta\_wps\_pin stack-based overflow (CVSS 8.7)
- [CVE-2025-9250](https://cve.now/CVE-2025-9250.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setPWDbyBBS stack-based overflow (CVSS 8.7)
- [CVE-2025-9249](https://cve.now/CVE-2025-9249.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DHCPReserveAddGroup stack-based overflow (CVSS 8.7)
- [CVE-2025-9248](https://cve.now/CVE-2025-9248.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_pingGatewayByBBS stack-based overflow (CVSS 8.7)
- [CVE-2025-9247](https://cve.now/CVE-2025-9247.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setVlan stack-based overflow (CVSS 8.7)
- [CVE-2025-9246](https://cve.now/CVE-2025-9246.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 check\_port\_conflict stack-based overflow (CVSS 8.7)
- [CVE-2025-9245](https://cve.now/CVE-2025-9245.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 WPSSTAPINEnr stack-based overflow (CVSS 8.7)
- [CVE-2025-9244](https://cve.now/CVE-2025-9244.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaticRoute os command injection (CVSS 5.3)
- [CVE-2025-9146](https://cve.now/CVE-2025-9146.md): Linksys E5600 Firmware checkFw.sh verify\_gemtek\_header risky encryption (CVSS 7.5)
- [CVE-2025-8833](https://cve.now/CVE-2025-8833.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchBack stack-based overflow (CVSS 8.7)
- [CVE-2025-8832](https://cve.now/CVE-2025-8832.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow (CVSS 8.7)
- [CVE-2025-8831](https://cve.now/CVE-2025-8831.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 remoteManagement stack-based overflow (CVSS 8.7)
- [CVE-2025-8830](https://cve.now/CVE-2025-8830.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan sub\_3517C os command injection (CVSS 5.3)
- [CVE-2025-8829](https://cve.now/CVE-2025-8829.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto um\_red os command injection (CVSS 5.3)
- [CVE-2025-8828](https://cve.now/CVE-2025-8828.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 ipv6cmd os command injection (CVSS 5.3)
- [CVE-2025-8827](https://cve.now/CVE-2025-8827.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto um\_inspect\_cross\_band os command injection (CVSS 5.3)
- [CVE-2025-8826](https://cve.now/CVE-2025-8826.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto um\_rp\_autochannel stack-based overflow (CVSS 8.7)
- [CVE-2025-8825](https://cve.now/CVE-2025-8825.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasicAuto os command injection (CVSS 5.3)
- [CVE-2025-8824](https://cve.now/CVE-2025-8824.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setRIP stack-based overflow (CVSS 8.7)
- [CVE-2025-8823](https://cve.now/CVE-2025-8823.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDeviceName os command injection (CVSS 5.3)
- [CVE-2025-8822](https://cve.now/CVE-2025-8822.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode algDisable stack-based overflow (CVSS 8.7)
- [CVE-2025-8821](https://cve.now/CVE-2025-8821.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP\_setBasic os command injection (CVSS 5.3)
- [CVE-2025-8820](https://cve.now/CVE-2025-8820.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflow (CVSS 8.7)
- [CVE-2025-8819](https://cve.now/CVE-2025-8819.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan stack-based overflow (CVSS 8.7)
- [CVE-2025-8818](https://cve.now/CVE-2025-8818.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan setDFSSetting os command injection (CVSS 5.3)
- [CVE-2025-8817](https://cve.now/CVE-2025-8817.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan stack-based overflow (CVSS 8.7)
- [CVE-2025-8816](https://cve.now/CVE-2025-8816.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow (CVSS 8.7)
- [CVE-2013-10058](https://cve.now/CVE-2013-10058.md): Linksys Routers apply.cgi Remote Command Injection (CVSS 8.6)
- [CVE-2013-10062](https://cve.now/CVE-2013-10062.md): Linksys Routers apply.cgi Path Traversal (CVSS 6.9)
- [CVE-2014-125122](https://cve.now/CVE-2014-125122.md): Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset (CVSS 5.3)
- [CVE-2013-3307](https://cve.now/CVE-2013-3307.md): Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell met (CVSS 8.3)
- [CVE-2025-6752](https://cve.now/CVE-2025-6752.md): Linksys WRT1900ACS/EA7200/EA7450/EA7500 IGD Layer3Forwarding SetDefaultConnectionService stack-based overflow (CVSS 8.7)
- [CVE-2025-6751](https://cve.now/CVE-2025-6751.md): Linksys E8450 HTTP POST Request portal.cgi set\_device\_language buffer overflow (CVSS 8.7)
- [CVE-2025-34037](https://cve.now/CVE-2025-34037.md): Linksys Routers E/WAG/WAP/WES/WET/WRT-Series (CVSS 10.0)
- [CVE-2025-5447](https://cve.now/CVE-2025-5447.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection (CVSS 5.3)
- [CVE-2025-5446](https://cve.now/CVE-2025-5446.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_checkCredentialsByBBS os command injection (CVSS 5.3)
- [CVE-2025-5445](https://cve.now/CVE-2025-5445.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_checkFWByBBS os command injection (CVSS 5.3)
- [CVE-2025-5444](https://cve.now/CVE-2025-5444.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_UpgradeFWByBBS os command injection (CVSS 5.3)
- [CVE-2025-5443](https://cve.now/CVE-2025-5443.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injection (CVSS 5.3)
- [CVE-2025-5442](https://cve.now/CVE-2025-5442.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP\_pingGatewayByBBS os command injection (CVSS 5.3)
- [CVE-2025-5441](https://cve.now/CVE-2025-5441.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection (CVSS 5.3)
- [CVE-2025-5440](https://cve.now/CVE-2025-5440.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injection (CVSS 5.3)
- [CVE-2025-5439](https://cve.now/CVE-2025-5439.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injection (CVSS 5.3)
- [CVE-2025-5438](https://cve.now/CVE-2025-5438.md): Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injection (CVSS 5.3)
- [CVE-2025-5000](https://cve.now/CVE-2025-5000.md): Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi control\_panel\_sw command injection (CVSS 5.3)
- [CVE-2025-4999](https://cve.now/CVE-2025-4999.md): Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi sub\_4153FC command injection (CVSS 5.3)
- [CVE-2024-8408](https://cve.now/CVE-2024-8408.md): Linksys WRT54G POST Parameter apply.cgi validate\_services\_port stack-based overflow (CVSS 5.3)
- [CVE-2024-1406](https://cve.now/CVE-2024-1406.md): Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosure (CVSS 4.3)
- [CVE-2024-1405](https://cve.now/CVE-2024-1405.md): Linksys WRT54GL Web Management Interface wlaninfo.htm information disclosure (CVSS 4.3)
- [CVE-2024-1404](https://cve.now/CVE-2024-1404.md): Linksys WRT54GL Web Management Interface SysInfo.htm information disclosure (CVSS 4.3)
- [CVE-2022-43973](https://cve.now/CVE-2022-43973.md): Arbitrary code execution in Linksys WRT54GL (CVSS 7.2)
- [CVE-2022-43972](https://cve.now/CVE-2022-43972.md): Null pointer dereference in Linksys WRT54GL (CVSS 6.5)
- [CVE-2022-43971](https://cve.now/CVE-2022-43971.md): Arbitrary code execution in Linksys WUMC710 (CVSS 7.2)
- [CVE-2022-43970](https://cve.now/CVE-2022-43970.md): Buffer overflow in Linksys WRT54GL (CVSS 7.2)
- [CVE-2022-38132](https://cve.now/CVE-2022-38132.md): Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. (CVSS 8.2)
- [CVE-2018-3955](https://cve.now/CVE-2018-3955.md): An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and L (CVSS 7.2)
- [CVE-2018-3954](https://cve.now/CVE-2018-3954.md): Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscept (CVSS 7.2)
- [CVE-2018-3953](https://cve.now/CVE-2018-3953.md): Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscept (CVSS 7.2)
- [CVE-2017-17411](https://cve.now/CVE-2017-17411.md): This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/linksys
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.