Skip to content
OpenAdvisories
Critical WID-SEC-2026-4327 4 CVEs

Linksys Router E5600: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Nov 3, 2026 · Updated Nov 3, 2026 · de-DE

Vendor: Linksys Product: Router

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Linksys Router E5600 ausnutzen, um sich erweiterte Rechte zu verschaffen, Daten zu manipulieren oder offenzulegen und einen Denial-of-Service-Zustand auszulösen.

Product

Router der Firma Linksys enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 4

  • Critical 10.0
    CVE-2026-121615

    Linksys E5600 Login mesh_login.cgi improper authentication

    A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/mesh_login.cgi of the component Login Handler. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. Th…

    Linksys E5600
  • High 7.5
    CVE-2026-121617

    Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write

    A security flaw has been discovered in Linksys E5600 1.1.0.26. Affected by this issue is the function init_multipart of the file /cgi-bin/upload_fw.cgi of the component Header Parser. The manipulation results in out-of-bounds write. The attack may be launched…

    Linksys E5600
  • Medium 5.3
    CVE-2026-121616

    Linksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds write

    A vulnerability was identified in Linksys E5600 1.1.0.26. Affected by this vulnerability is the function strcpy of the file /cgi-bin/mesh_login.cgi of the component JSON Request Parser. The manipulation of the argument username/password/token/source/cn/action…

    Linksys E5600
  • Medium 5.3
    CVE-2026-121618

    Linksys E5600 Factory Quality Control fqc.cgi information disclosure

    A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of the component Factory Quality Control. This manipulation causes information disclosure. Remote exploitation of the attack is possible. The e…

    Linksys E5600

Revision history

  1. #1

    Initiale Fassung

References