Skip to content
OpenAdvisories

Vendor

Linksys

112 known vulnerabilities.

Products

RE6250 58 RE7000 58 RE6500 57 RE6300 57 RE6350 57 RE9000 57 E1700 9 MR9600 8 MX4200 6 WRT54GL 5 E5600 5 WAG200G 3 ESeries E1200 3 ESeries E2500 3 WRT54GL Wireless-G Broadband Router 3 E3200 2 FGW3000-AH 2 FGW3000-HK 2 E5350 2 E8450 2 WRT160nv2 1 Linksys WUMC710 Wireless-AC Universal Media Connector 1 Linksys WVBR0 1 WRT54G 1 E1500 1 MR8300 Router 1 WRT1900ACS 1 EA7200 1 EA7450 1 EA7500 1 E1000 1 E1200 1 WRT120N 1 Linksys E9450-SG 1 E4200 1 E3000 1 E2500 v1/v2 1 E2100L v1 1 E2000 1 E1550 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.2
    CVE-2026-6992 Public exploit

    Linksys MR9600 JNAP Action run_central2.sh BTRequestGetSmartConnectStatus os command injection

    A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function BTRequestGetSmartConnectStatus of the file /etc/init.d/run_central2.sh of the component JNAP Action Handler. The manipulation of the argument pin leads to os command inje…

    Linksys MR9600
  • High 8.6
    CVE-2013-10058 Public exploit

    Linksys Routers apply.cgi Remote Command Injection

    An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the apply.cgi endpoint. The web interface fails to properly sanitize user-supplied input passed to the ping_…

    Linksys WRT160nv2
  • Medium 6.9
    CVE-2013-10062 Public exploit

    Linksys Routers apply.cgi Path Traversal

    A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to…

    Linksys E1500
  • Medium 5.3
    CVE-2014-125122 Public exploit

    Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset

    A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router. The vulnerability is triggered by sending a specially crafted HTTP POST request with an overly long TM_Block_URL parameter to the endpoint…

    Linksys WRT120N
  • High 8.3
    CVE-2013-3307 Public exploit EPSS 63%

    Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command in…

    Linksys E3200 E1200 E1000
  • Critical 10.0
    CVE-2025-34037 Public exploit EPSS 96%

    Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

    An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter with…

    Linksys E3200 E2100L v1 E1550
  • High 7.2
    CVE-2022-43973 Public exploit

    Arbitrary code execution in Linksys WRT54GL

    An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSI function within the httpd binary uses unvalidated user input in the construction of a system command. An authenticate…

    Linksys WRT54GL Wireless-G Broadband Router
  • High 7.2
    CVE-2018-3953 Public exploit EPSS 14%

    Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Versio…

    Linksys ESeries E2500 ESeries E1200
  • Unscored —
    CVE-2017-17411 Public exploit EPSS 88%

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Auth…

    Linksys Linksys WVBR0