Vendor
Linksys vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 37 vulnerabilities in Linksys: 3 in the last 7 days and 21 in the last 90 days, 17 of them critical and 0 exploited in the wild. The most recent, CVE-2026-127277, was published on 13 November 2026. 17 vulnerabilities in the last four weeks, up from none in the four before. 11 critical against 0. 18 technologies have a page of their own.
- Last 7 days
- 3
- Last 90 days
- 21
- Critical, all time
- 17
- Exploited in the wild
- 0
About Linksys
Linksys is a manufacturer of networking hardware, including routers, switches, and access points.
Linksys technologies
- Linksys E56006
- Linksys E12005
- Linksys E1200 Firmware5
- Linksys E17005
- Linksys RE70005
- Linksys Re7000 Firmware4
- Linksys EA81003
- Linksys Re62503
- Linksys Re6250 Firmware3
- Linksys Re63003
- Linksys Re6300 Firmware3
- Linksys Re63503
- Linksys Re6350 Firmware3
- Linksys Re65003
- Linksys Re6500 Firmware3
- Linksys Re90003
- Linksys Re9000 Firmware3
- Linksys WAG200G3
Latest Linksys vulnerabilities
- CVE-2026-127277: Linksys EA8100 SMB service improper initializationcriticalCVSS 10
- CVE-2026-127275: Linksys EA8100 authentication bypass in JNAP APIcriticalCVSS 10
- CVE-2026-127273: Linksys EA8100 missing authentication in JNAP APImediumCVSS 4.3
- CVE-2026-121933: Linksys E5350 authentication bypass in Setup WizardcriticalCVSS 10
- CVE-2026-121932: Linksys E5350 OS command injection in /wizard/apply.cgicriticalCVSS 10
- CVE-2026-121931: Linksys WRT54GL OS command injection in Traceroute diagnosticcriticalCVSS 9.1
- CVE-2026-121930: Linksys WRT54GL OS command injection in Ping DiagnosticcriticalCVSS 9.1
- CVE-2026-121618: Linksys E5600 unauthenticated information disclosure in factory QC pagemediumCVSS 5.3
- CVE-2026-121617: Linksys E5600 buffer overflow in firmware uploadhighCVSS 7.5
- CVE-2026-121616: Linksys E5600 buffer overflow in mesh_login.cgimediumCVSS 5.3
- CVE-2026-121615: Linksys E5600 authentication bypass in mesh logincriticalCVSS 10
- CVE-2026-120283: Linksys E8450 stack-based buffer overflow in portal.cgicriticalCVSS 10
- CVE-2013-20009: Linksys WAG200G stored cross-site scripting in policy_namemediumCVSS 4.8
- CVE-2013-20008: Linksys WAG200G weak password change mechanismmediumCVSS 6.8
- CVE-2013-20007: Linksys WAG200G OS command injection in timer_intervalhighCVSS 7.2
- CVE-2026-108896: Linksys E1700 OS command injection in IPv6 configurationcriticalCVSS 9.9EPSS 2.2%
- CVE-2026-108895: Linksys E1700 OS command injection in DMZ functioncriticalCVSS 9.9EPSS 2.2%
- CVE-2026-108894: Linksys E1700 OS command injection in static route handlercriticalCVSS 9.9EPSS 2.2%
- CVE-2026-108893: Linksys E1700 stack buffer overflow in setVlancriticalCVSS 9.9EPSS 0.5%
- CVE-2026-108892: Linksys E1700 stack buffer overflow in MAC filtercriticalCVSS 10EPSS 0.6%
- CVE-2026-86299: Linksys RE7000 OS command injection in PingTest handlercriticalCVSS 9.9EPSS 3.7%
- CVE-2026-6992: A vulnerability was identified in Linksys MR9600 2.0.6.206937. This affects the function…highCVSS 7.2EPSS 8.2%
- CVE-2025-29229: linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.criticalCVSS 9.8EPSS 1.3%
- CVE-2025-29228: Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.criticalCVSS 9.8EPSS 1.3%
- CVE-2025-52692: Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially…highCVSS 8.8EPSS 6.4%
Most severe Linksys vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-108892: Linksys E1700 stack buffer overflow in MAC filtercriticalCVSS 10EPSS 0.6%
- CVE-2026-127277: Linksys EA8100 SMB service improper initializationcriticalCVSS 10
- CVE-2026-127275: Linksys EA8100 authentication bypass in JNAP APIcriticalCVSS 10
- CVE-2026-121933: Linksys E5350 authentication bypass in Setup WizardcriticalCVSS 10
- CVE-2026-121932: Linksys E5350 OS command injection in /wizard/apply.cgicriticalCVSS 10
- CVE-2026-121615: Linksys E5600 authentication bypass in mesh logincriticalCVSS 10
- CVE-2026-120283: Linksys E8450 stack-based buffer overflow in portal.cgicriticalCVSS 10
- CVE-2026-86299: Linksys RE7000 OS command injection in PingTest handlercriticalCVSS 9.9EPSS 3.7%
- CVE-2026-108896: Linksys E1700 OS command injection in IPv6 configurationcriticalCVSS 9.9EPSS 2.2%
- CVE-2026-108895: Linksys E1700 OS command injection in DMZ functioncriticalCVSS 9.9EPSS 2.2%
Vulnerabilities per week
17 vulnerabilities in the last four weeks, up from none in the four before. 11 critical against 0. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 1 | 1 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 5 | 5 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 3 | 0 | |
| 2 Nov 2026 | 9 | 6 | |
| 9 Nov 2026 | 3 | 2 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Linksys vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/linksys)<a href="https://junglewise.ai/threats/vendors/linksys"><img src="https://junglewise.ai/threats/vendors/linksys/badge.svg" alt="Linksys vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/linksys.json, and this page as text at https://junglewise.ai/threats/vendors/linksys.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Linksys vulnerabilities", https://junglewise.ai/threats/vendors/linksys, 13 November 2026.