Linksys vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2013-20008 Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the curreHigh 7 · Oct 27, 2026
• CVE-2013-20007 Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delHigh 8.6 · Oct 27, 2026
• CVE-2026-108896 A vulnerability was found in Linksys E1700 1.0.0.4.003.High 8.6 · Oct 12, 2026
• CVE-2026-108895 A weakness has been identified in Linksys E1700 1.0.0.4.003.High 8.6 · Oct 12, 2026
• CVE-2026-108894 A security flaw has been discovered in Linksys E1700 1.0.0.4.003.High 8.6 · Oct 12, 2026
• CVE-2026-108893 A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003.High 8.6 · Oct 12, 2026
• CVE-2026-108892 A vulnerability was determined in Linksys E1700 1.0.0.4.003.Critical 9.3 · Oct 12, 2026
• CVE-2026-86299 A vulnerability was detected in Linksys RE7000 2.0.15.High 8.6 · Sep 7, 2026
• CVE-2026-6992 A vulnerability was identified in Linksys MR9600 2.0.6.206937.High 7.3 · Apr 25, 2026
• CVE-2026-4558 A flaw has been found in Linksys MR9600 2.0.6.206937.High 7.4 · Mar 22, 2026
• CVE-2026-27850 Due to an improperly configured firewall rule, the router will accept any connection on the WAN port with the source port 5222, exposing all services which are High 7.5 · Feb 25, 2026
• CVE-2026-27849 Due to missing neutralization of special elements, OS commands can be injected via the update functionality of a TLS-SRP connection, which is normally used for Critical 9.8 · Feb 25, 2026
• CVE-2026-27848 Due to missing neutralization of special elements, OS commands can be injected via the handshake of a TLS-SRP connection, which are ultimately run as the root uCritical 9.8 · Feb 25, 2026
• CVE-2026-27847 Due to improper neutralization of special elements, SQL statements can be injected via the handshake of a TLS-SRP connection.Critical 9.8 · Feb 25, 2026
• CVE-2025-29229 linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.Critical 9.8 · Dec 23, 2025
• CVE-2025-29228 Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.Critical 9.8 · Dec 23, 2025
• CVE-2025-52692 Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration High 8.8 · Dec 18, 2025
• CVE-2025-14136 A security flaw has been discovered in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.High 7.4 · Dec 6, 2025
• CVE-2025-14135 A vulnerability was identified in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.High 7.4 · Dec 6, 2025
• CVE-2025-14134 A vulnerability was determined in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.High 7.4 · Dec 6, 2025
• CVE-2025-14133 A vulnerability was found in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001.High 7.4 · Dec 6, 2025
• CVE-2025-60696 A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW_v2.0.15_211230_1012).High 8.4 · Nov 13, 2025
• CVE-2025-60694 A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gzHigh 7.5 · Nov 13, 2025
• CVE-2025-60692 A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz).High 8.4 · Nov 13, 2025
• CVE-2025-60691 A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz).High 8.8 · Nov 13, 2025