Is CVE-2025-60690 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-60690 being exploited in the wild.

How severe is CVE-2025-60690?

High severity, with a CVSS score of 8.8, published 13 November 2025.

Is there a fix for CVE-2025-60690?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-60690 attacked?

It is attacked from the adjacent network, in a network appliance.

Am I affected by CVE-2025-60690?

Check whether you run Linksys E1200 or Linksys E1200 Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-60690: Linksys E1200 v2 stack overflow in httpd get_merge_ipaddr

CVE-2025-60690 · Severity: high · CVSS 8.8 · Published 2025-11-13

A security vulnerability has been identified in the Linksys E1200 v2 router, a device used to provide wireless internet connectivity for homes and small offices. An attacker can exploit this flaw by sending a specially crafted web request to the router's management interface. If successful, this could allow the attacker to crash the device or take complete control of it, potentially leading to the interception of network traffic or unauthorized access to the local network.

Technologies: Linksys E1200, Linksys E1200 Firmware. Vendors: Linksys.

Quick answers

Is CVE-2025-60690 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-60690 being exploited in the wild.
How severe is CVE-2025-60690?: High severity, with a CVSS score of 8.8, published 13 November 2025.
Which products and versions are affected?: Linksys E1200 2.0.11.001_us.
Is there a fix for CVE-2025-60690?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-60690 attacked?: It is attacked from the adjacent network, in a network appliance.
Am I affected by CVE-2025-60690?: Check whether you run Linksys E1200 or Linksys E1200 Firmware at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow exists in the 'get_merge_ipaddr' function within the 'httpd' binary of Linksys E1200 v2 routers running firmware version 2.0.11.001_us. The vulnerability is caused by the unsafe use of 'strcat' when concatenating four user-supplied CGI parameters (formatted as <parameter>_0 through <parameter>_3) into a fixed-size stack buffer without performing bounds checking. An unauthenticated attacker on the adjacent network can exploit this by sending a POST request with overly long parameter values, leading to memory corruption. This can result in arbitrary code execution or a denial-of-service (DoS) condition. While a Proof of Concept (PoC) exists, there is currently no official patch mentioned in the advisory.

Affected products

Linksys E1200 v2 2.0.11.001_us

Timeline

2025-11-13: advisory: Initial disclosure of the vulnerability.

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.