LI
Vendor
Linksys
992
CVEs
0
On KEV
9
New 30D
Products
E110.0
E1700
Linksys
11 CVEs0 on KEV5 new
RE9.8
RE6250
Linksys
58 CVEs0 on KEV1 new
WA7.2
WAG200G
Linksys
4 CVEs0 on KEV3 new
RF9.8
Re6500 Firmware
Linksys
60 CVEs0 on KEV0 new
RE9.9
RE7000
Linksys
60 CVEs0 on KEV0 new
RF9.8
Re6300 Firmware
Linksys
58 CVEs0 on KEV0 new
RE9.8
RE6250
Linksys
57 CVEs0 on KEV0 new
RE9.8
RE6300
Linksys
57 CVEs0 on KEV0 new
RE9.8
RE6350
Linksys
57 CVEs0 on KEV0 new
RF9.8
Re6350 Firmware
Linksys
57 CVEs0 on KEV0 new
RE9.8
RE6500
Linksys
57 CVEs0 on KEV0 new
RE9.8
RE7000
Linksys
57 CVEs0 on KEV0 new
RE9.8
RE9000
Linksys
57 CVEs0 on KEV0 new
RF9.8
Re9000 Firmware
Linksys
57 CVEs0 on KEV0 new
EF9.8
E5600 Firmware
Linksys
18 CVEs0 on KEV0 new
WR9.8
WRT54G
Linksys
18 CVEs0 on KEV0 new
EF8.8
E8450 Firmware
Linksys
11 CVEs0 on KEV0 new
EF9.8
E1200 Firmware
Linksys
10 CVEs0 on KEV0 new
EF9.8
E7350 Firmware
Linksys
8 CVEs0 on KEV0 new
WF7.5
Wrt54gl Firmware
Linksys
7 CVEs0 on KEV0 new
BE–
Befsr41
Linksys
6 CVEs0 on KEV0 new
EF9.8
Ea6500 Firmware
Linksys
6 CVEs0 on KEV0 new
MR9.8
MR9600
Linksys
6 CVEs0 on KEV0 new
MX9.8
MX4200
Linksys
6 CVEs0 on KEV0 new
EF9.8
E2500 Firmware
Linksys
5 CVEs0 on KEV0 new
EA–
Ea6500
Linksys
5 CVEs0 on KEV0 new
WR7.5
WRT54GL
Linksys
5 CVEs0 on KEV0 new
BE–
Befvp41
Linksys
4 CVEs0 on KEV0 new
E18.8
E1700
Linksys
4 CVEs0 on KEV0 new
MR8.8
MR9600
Linksys
4 CVEs0 on KEV0 new
WA–
Wag54gs
Linksys
4 CVEs0 on KEV0 new
WA–
Wap11
Linksys
4 CVEs0 on KEV0 new
BE–
Befn2ps4
Linksys
3 CVEs0 on KEV0 new
BE–
Befsr11
Linksys
3 CVEs0 on KEV0 new
BE–
Befsr81
Linksys
3 CVEs0 on KEV0 new
BE–
Befsru31
Linksys
3 CVEs0 on KEV0 new
BE–
Befsx41
Linksys
3 CVEs0 on KEV0 new
BE–
Befw11s4
Linksys
3 CVEs0 on KEV0 new
EF8.8
E2000 Firmware
Linksys
3 CVEs0 on KEV0 new
EF8.8
Ea4500 Firmware
Linksys
3 CVEs0 on KEV0 new
WR–
Wrt54gs
Linksys
3 CVEs0 on KEV0 new
E310.0
E3200
Linksys
2 CVEs0 on KEV0 new
E4–
E4200v2
Linksys
2 CVEs0 on KEV0 new
EF–
E4200v2 Firmware
Linksys
2 CVEs0 on KEV0 new
EA–
Ea2700
Linksys
2 CVEs0 on KEV0 new
EF–
Ea2700 Firmware
Linksys
2 CVEs0 on KEV0 new
EA–
Ea3500
Linksys
2 CVEs0 on KEV0 new
EF–
Ea3500 Firmware
Linksys
2 CVEs0 on KEV0 new
EA–
Ea4500
Linksys
2 CVEs0 on KEV0 new
EA–
Ea6200
Linksys
2 CVEs0 on KEV0 new
EF–
Ea6200 Firmware
Linksys
2 CVEs0 on KEV0 new
EA–
Ea6300
Linksys
2 CVEs0 on KEV0 new
EF–
Ea6300 Firmware
Linksys
2 CVEs0 on KEV0 new
EA–
Ea6400
Linksys
2 CVEs0 on KEV0 new
EF–
Ea6400 Firmware
Linksys
2 CVEs0 on KEV0 new
EA–
Ea6700
Linksys
2 CVEs0 on KEV0 new
EF–
Ea6700 Firmware
Linksys
2 CVEs0 on KEV0 new
EA–
Ea6900
Linksys
2 CVEs0 on KEV0 new
EF–
Ea6900 Firmware
Linksys
2 CVEs0 on KEV0 new
EA9.8
EA7500
Linksys
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2013-20009 New | WA WAG200G Linksys | 4.8 | Oct 28 | Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter |
| CVE-2013-20008 New | WA WAG200G Linksys | 6.8 | Oct 28 | Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password |
| CVE-2013-20007 New | WA WAG200G Linksys | 7.2 | Oct 28 | Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi |
| CVE-2026-114576 | RE RE6250 Linksys | 3.7 | Oct 22 | Linksys RE6250 Web Management strcmp random values |
| CVE-2026-108896 | E1 E1700 Linksys | 9.9 | Oct 12 | Linksys E1700 setLinksysIpv6 os command injection |
| CVE-2026-108895 | E1 E1700 Linksys | 9.9 | Oct 12 | Linksys E1700 setDMZ os command injection |
| CVE-2026-108894 | E1 E1700 Linksys | 9.9 | Oct 12 | Linksys E1700 Static Route addStaticRoute os command injection |
| CVE-2026-108893 | E1 E1700 Linksys | 9.9 | Oct 12 | Linksys E1700 setVlan stack-based overflow |
| CVE-2026-108892 | E1 E1700 Linksys | 10.0 | Oct 12 | Linksys E1700 Mac Filter ssid1MACFilter stack-based overflow |
| CVE-2026-86299 | RE RE7000 Linksys | 9.9 | Sep 7 | Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection |
| CVE-2026-6992 | MR MR9600 Linksys | 7.2 | Apr 25 | Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection |
| CVE-2026-4558 | MR MR9600 Linksys | 8.8 | Mar 22 | Linksys MR9600 SmartConnect.lua smartConnectConfigure os command injection |
| CVE-2026-27850 | MX MX4200 Linksys | 7.5 | Feb 25 | Improper verification in Linksys MR9600, Linksys MX4200 |
| CVE-2026-27849 | MX MX4200 Linksys | 9.8 | Feb 25 | Missing neutralization in Linksys MR9600, Linksys MX4200 |
| CVE-2026-27848 | MR MR9600 Linksys | 9.8 | Feb 25 | Missing neutralization in Linksys MR9600, Linksys MX4200 |
| CVE-2026-27847 | MR MR9600 Linksys | 9.8 | Feb 25 | Missing authentication in Linksys MR9600, Linksys MX4200 |
| CVE-2026-27846 | MR MR9600 Linksys | 6.2 | Feb 25 | Missing authentication in Linksys MR9600, Linksys MX4200 |
| CVE-2026-25603 | MX MX4200 Linksys | 6.6 | Feb 24 | Path Traversal vulnerability in Linksys MR9600, Linksys MX4200 |
| CVE-2025-29228 | EF E5600 Firmware Linksys | 9.8 | Dec 23 | Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter |
| CVE-2025-29229 | EF E5600 Firmware Linksys | 9.8 | Dec 23 | linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus |
| CVE-2025-52692 | LE Linksys E9450-SG Linksys | 8.8 | Dec 19 | Bypass Authentication |
| CVE-2025-29231 | EF E5600 Firmware Linksys | 6.1 | Dec 16 | A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted… |
| CVE-2025-14136 | RE RE6500 Linksys | 8.8 | Dec 6 | Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflow |
| CVE-2025-14135 | RE RE6500 Linksys | 8.8 | Dec 6 | Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wired_clientlist_setClientsName stack-based overflow |
| CVE-2025-14134 | RE RE7000 Linksys | 8.8 | Dec 6 | Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflow |
| CVE-2025-14133 | RE RE9000 Linksys | 8.8 | Dec 6 | Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wireless_clientlist_setClientsName stack-based overflow |
| CVE-2025-60694 | EF E1200 Firmware Linksys | 7.5 | Nov 13 | A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz) |
| CVE-2025-60696 | RF Re7000 Firmware Linksys | 8.4 | Nov 13 | A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW_v2.0.15_211230_1012) |
| CVE-2025-60695 | EF E7350 Firmware Linksys | 5.9 | Nov 13 | A stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers (Firmware 1.1.00.032) |
| CVE-2025-60692 | EF E1200 Firmware Linksys | 8.4 | Nov 13 | A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz) |
| CVE-2025-60689 | EF E1200 Firmware Linksys | 5.4 | Nov 13 | An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz) |
| CVE-2025-60690 | EF E1200 Firmware Linksys | 8.8 | Nov 13 | A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz) |
| CVE-2025-60691 | EF E1200 Firmware Linksys | 8.8 | Nov 13 | A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz) |
| CVE-2025-60693 | EF E1200 Firmware Linksys | 6.5 | Nov 13 | A stack-based buffer overflow exists in the get_merge_mac function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz) |
| CVE-2025-9575 | RE RE6350 Linksys | 8.8 | Aug 28 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 upload.cgi cgiMain os command injection |
| CVE-2025-9528 | E1 E1700 Linksys | 7.2 | Aug 27 | Linksys E1700 systemCommand os command injection |
| CVE-2025-9527 | E1 E1700 Linksys | 8.8 | Aug 27 | Linksys E1700 QoSSetup stack-based overflow |
| CVE-2025-9526 | E1 E1700 Linksys | 8.8 | Aug 27 | Linksys E1700 setSysAdm stack-based overflow |
| CVE-2025-9525 | E1 E1700 Linksys | 8.8 | Aug 27 | Linksys E1700 setWan stack-based overflow |
| CVE-2025-9483 | RE RE6300 Linksys | 8.8 | Aug 26 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 singlePortForwardAdd stack-based overflow |
| CVE-2025-9482 | RE RE6250 Linksys | 8.8 | Aug 26 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portRangeForwardAdd stack-based overflow |
| CVE-2025-9481 | RE RE6350 Linksys | 8.8 | Aug 26 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 stack-based overflow |
| CVE-2025-9393 | RE RE6500 Linksys | 8.8 | Aug 24 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 addStaProfile stack-based overflow |
| CVE-2025-9392 | RE RE7000 Linksys | 8.8 | Aug 24 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 qosClassifier stack-based overflow |
| CVE-2025-9363 | RE RE6500 Linksys | 8.8 | Aug 23 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 portTriggerManageRule stack-based overflow |
| CVE-2025-9362 | RE RE7000 Linksys | 8.8 | Aug 23 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 urlFilterManageRule stack-based overflow |
| CVE-2025-9361 | RE RE6500 Linksys | 8.8 | Aug 23 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 ipRangeBlockManageRule stack-based overflow |
| CVE-2025-9360 | RE RE6500 Linksys | 8.8 | Aug 23 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 accessControlAdd stack-based overflow |
| CVE-2025-9359 | RE RE7000 Linksys | 8.8 | Aug 23 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_checkCredentialsByBBS stack-based overflow |
| CVE-2025-9358 | RE RE6250 Linksys | 8.8 | Aug 23 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setSysAdm stack-based overflow |
| CVE-2025-9357 | RE RE9000 Linksys | 8.8 | Aug 23 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchByBBS stack-based overflow |
| CVE-2025-9356 | RE RE6500 Linksys | 8.8 | Aug 22 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 inboundFilterAdd stack-based overflow |
| CVE-2025-9355 | RE RE6300 Linksys | 8.8 | Aug 22 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 scheduleAdd stack-based overflow |
| CVE-2025-9253 | RE RE9000 Linksys | 8.8 | Aug 20 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_doSpecifySiteSurvey stack-based overflow |
| CVE-2025-9252 | RE RE6350 Linksys | 8.8 | Aug 20 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DisablePasswordAlertRedirect stack-based overflow |
| CVE-2025-9251 | RE RE6350 Linksys | 8.8 | Aug 20 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 sta_wps_pin stack-based overflow |
| CVE-2025-9250 | RE RE6500 Linksys | 8.8 | Aug 20 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setPWDbyBBS stack-based overflow |
| CVE-2025-9249 | RE RE6300 Linksys | 8.8 | Aug 20 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DHCPReserveAddGroup stack-based overflow |
| CVE-2025-9248 | RE RE6250 Linksys | 8.8 | Aug 20 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_pingGatewayByBBS stack-based overflow |
| CVE-2025-9247 | RE RE6250 Linksys | 8.8 | Aug 20 | Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setVlan stack-based overflow |
