Linksys
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| RE6250 | 58 | – | Oct 22, 2026 |
| RE7000 | 58 | – | Sep 7, 2026 |
| RE9000 | 57 | – | Dec 6, 2025 |
| RE6300 | 57 | – | Dec 6, 2025 |
| RE6350 | 57 | – | Dec 6, 2025 |
| RE6500 | 57 | – | Dec 6, 2025 |
| E1700 | 9 | – | Oct 12, 2026 |
| MR9600 | 8 | – | Apr 25, 2026 |
| MX4200 | 6 | – | Feb 25, 2026 |
| WRT54GL | 5 | – | Nov 4, 2026 |
| E5600 | 5 | – | Nov 4, 2026 |
| WRT54GL Wireless-G Broadband Router | 3 | – | Jan 9, 2023 |
| E8450 | 2 | – | Nov 2, 2026 |
| FGW3000-AH | 2 | – | May 20, 2025 |
| E5350 | 2 | – | Nov 4, 2026 |
| FGW3000-HK | 2 | – | May 20, 2025 |
| MR8300 Router | 1 | – | Aug 23, 2022 |
| WRT1900ACS | 1 | – | Jun 27, 2025 |
| WRT54G | 1 | – | Sep 4, 2024 |
| EA7500 | 1 | – | Jun 27, 2025 |
| E1200 v1 | 1 | – | Jun 24, 2025 |
| E1500 v1 | 1 | – | Jun 24, 2025 |
| E1550 | 1 | – | Jun 24, 2025 |
| E2000 | 1 | – | Jun 24, 2025 |
| E2100L v1 | 1 | – | Jun 24, 2025 |
| E2500 v1/v2 | 1 | – | Jun 24, 2025 |
| E3000 | 1 | – | Jun 24, 2025 |
| E3200 | 1 | – | Jun 24, 2025 |
| E4200 | 1 | – | Jun 24, 2025 |
| E900 v1 | 1 | – | Jun 24, 2025 |
| EA7200 | 1 | – | Jun 27, 2025 |
| EA7450 | 1 | – | Jun 27, 2025 |
| E1000 v1 | 1 | – | Jun 24, 2025 |
| Linksys E9450-SG | 1 | – | Dec 19, 2025 |
| Linksys WUMC710 Wireless-AC Universal Media Connector | 1 | – | Jan 9, 2023 |
Exploited and recent CVEs
- CVE-2026-121933 Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication 1.0%
- CVE-2026-121932 Linksys E5350 apply.cgi system os command injection 2.4%
- CVE-2026-121931 Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection 2.7%
- CVE-2026-121930 Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection 2.7%
- CVE-2026-121618 Linksys E5600 Factory Quality Control fqc.cgi information disclosure 0.8%
- CVE-2026-121617 Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write 0.5%
- CVE-2026-121616 Linksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds write 0.3%
- CVE-2026-121615 Linksys E5600 Login mesh_login.cgi improper authentication 0.8%
- CVE-2026-120283 Linksys E8450 portal.cgi strcpy stack-based overflow 0.6%
- CVE-2026-114576 Linksys RE6250 Web Management strcmp random values 0.5%
- CVE-2026-108896 Linksys E1700 setLinksysIpv6 os command injection 2.2%
- CVE-2026-108895 Linksys E1700 setDMZ os command injection 2.2%
- CVE-2026-108894 Linksys E1700 Static Route addStaticRoute os command injection 2.2%
- CVE-2026-108893 Linksys E1700 setVlan stack-based overflow 0.5%
- CVE-2026-108892 Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow 0.6%
- CVE-2026-86299 Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection 3.7%
- CVE-2026-6992 Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection 8.1%
- CVE-2026-4558 Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection 5.0%
- CVE-2026-27850 Improper verification in Linksys MR9600, Linksys MX4200 0.3%
- CVE-2026-27850 Improper verification in Linksys MR9600, Linksys MX4200 0.3%
- CVE-2026-27849 Missing neutralization in Linksys MR9600, Linksys MX4200 0.4%
- CVE-2026-27849 Missing neutralization in Linksys MR9600, Linksys MX4200 0.4%
- CVE-2026-27848 Missing neutralization in Linksys MR9600, Linksys MX4200 0.4%
- CVE-2026-27848 Missing neutralization in Linksys MR9600, Linksys MX4200 0.4%
- CVE-2026-27847 Missing authentication in Linksys MR9600, Linksys MX4200 0.4%
- CVE-2026-27847 Missing authentication in Linksys MR9600, Linksys MX4200 0.4%
- CVE-2026-27846 Missing authentication in Linksys MR9600, Linksys MX4200 0.2%
- CVE-2026-27846 Missing authentication in Linksys MR9600, Linksys MX4200 0.2%
- CVE-2026-25603 Path Traversal vulnerability in Linksys MR9600, Linksys MX4200 0.3%
- CVE-2026-25603 Path Traversal vulnerability in Linksys MR9600, Linksys MX4200 0.3%