Vulnerability · Published Sep 7, 2026 · Assigned by VulDB

CVE-2026-86299Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection

Critical 9.9

In plain English

A critical-severity OS command injection in RE7000 from Linksys. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 3.7% (higher than 90% of all known vulnerabilities).

Severity (CVSS 3.1)9.9Critical

Exploit odds (30 days)3.7%top 10.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.

Affected products (as reported)

Vendor	Product	Versions
Linksys	RE7000	2.0.15

Weakness: CWE-78, CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R

References

VDB-399463 | Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection vdb-entry, technical-description
VDB-399463 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
CVE-2026-86299 | CVE Analysis and Report third-party-advisory
Submit #906547 | Linksys RE7000 v2 2.0.15 Command Injection third-party-advisory
https://github.com/limou89/somevul/blob/main/Linksys_RE7000_v2_PingTest_Command_Injection.md exploit
https://www.linksys.com/ product