# CVE-2025-29228: Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

Source: https://junglewise.ai/threats/cve-2025-29228-linksys-e5600-v1-1-0-26-is-vulnerable-to-command-injection-in-the  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-12-23  
License: CC BY 4.0 with a link back

CVE-2025-29228 · Severity: critical · CVSS 9.8 · Published 2025-12-23

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

Technologies: [Linksys E5600](https://junglewise.ai/threats/technologies/e5600). Vendors: [Linksys](https://junglewise.ai/threats/vendors/linksys).

## Quick answers

**Is CVE-2025-29228 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-29228 being exploited in the wild.

**How severe is CVE-2025-29228?** Critical severity, with a CVSS score of 9.8, published 23 December 2025.

**Which products and versions are affected?** Linksys E5600, Linksys E5600 Firmware. The advisory does not name versions.

**Is there a fix for CVE-2025-29228?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-29228?** Check whether you run Linksys E5600 or Linksys E5600 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Linksys E5600
- Linksys E5600 Firmware

## Related threats

- [Linksys E5600 unauthenticated information disclosure in factory QC page](https://junglewise.ai/threats/cve-2026-121618-a-weakness-has-been-identified-in-linksys-e5600-1-1-0-26-this)
- [Linksys E5600 buffer overflow in firmware upload](https://junglewise.ai/threats/cve-2026-121617-a-security-flaw-has-been-discovered-in-linksys-e5600-1-1-0-26)
- [Linksys E5600 buffer overflow in mesh_login.cgi](https://junglewise.ai/threats/cve-2026-121616-a-vulnerability-was-identified-in-linksys-e5600-1-1-0-26)
- [Linksys E5600 authentication bypass in mesh login](https://junglewise.ai/threats/cve-2026-121615-a-vulnerability-was-determined-in-linksys-e5600-1-1-0-26)
- [linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.](https://junglewise.ai/threats/cve-2025-29229-linksys-e5600-v1-1-0-26-is-vulnerable-to-command-injection-in-the)