Linksys vulnerabilities
112 published CVEs name Linksys among the affected products.
- Published CVEs
- 112
- Last 12 months
- 32
- Critical
- 17
- Known exploited
- 0
Critical 17High 58Medium 37Low 0Not scored 0
CVEs per yearBy the year they were published
- 20171
- 20183
- 20221
- 20234
- 20244
- 202572
- 202627
Newest CVEs
- CVE-2026-121933
Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication
Linksys · E5350
Critical10.0 - CVE-2026-121932
Linksys E5350 apply.cgi system os command injection
Linksys · E5350
Critical10.0 - CVE-2026-121931
Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection
Linksys · WRT54GL
Critical9.4 - CVE-2026-121930
Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection
Linksys · WRT54GL
Critical9.4 - CVE-2026-121618
Linksys E5600 Factory Quality Control fqc.cgi information disclosure
Linksys · E5600
Medium6.9 - CVE-2026-121617
Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write
Linksys · E5600
High8.7 - CVE-2026-121616
Linksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds write
Linksys · E5600
Medium6.9 - CVE-2026-121615
Linksys E5600 Login mesh_login.cgi improper authentication
Linksys · E5600
Critical10.0 - CVE-2026-120283
Linksys E8450 portal.cgi strcpy stack-based overflow
Linksys · E8450
Critical10.0 - CVE-2013-20009
Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter
Linksys · WAG200G
Medium4.8
Products with the most CVEs
Most common weaknesses
- CWE-119 Memory buffer bounds error47
- CWE-121 Stack-based buffer overflow46
- CWE-78 OS command injection42
- CWE-77 Command injection32
- CWE-787 Out-of-bounds write7
- CWE-200 Exposure of sensitive information4
- CWE-306 Missing authentication for a critical function3
- CWE-74 Injection3
- CWE-120 Classic buffer overflow2
- CWE-22 Path traversal2