CVE-2025-60689Medium· 5.4▾ TwilightPoC availableAn unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The vulnerability occurs because user-supplied CGI parameters (wl…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 29.7 · likelihood 3.7 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Jul 29.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
9.1%
Exploit-DB
9.1% → 18%
An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The vulnerability occurs because user-supplied CGI parameters (wl_ant, wl_ssid, wl_rate, ttcp_num, ttcp_ip, ttcp_size) are concatenated into system command strings without proper sanitization and executed via wl_exec_cmd. Successful exploitation allows remote attackers to execute arbitrary commands on the device without authentication.
e1200_firmware = 2.0.11.001Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108896Critical· 9.9A vulnerability was found in Linksys E1700 1.0.0.4.003
CVE-2026-108895Critical· 9.9A weakness has been identified in Linksys E1700 1.0.0.4.003
CVE-2026-108894Critical· 9.9A security flaw has been discovered in Linksys E1700 1.0.0.4.003
CVE-2026-86299Critical· 9.9A vulnerability was detected in Linksys RE7000 2.0.15
CVE-2026-114576Low· 3.7Linksys RE6250 Web Management strcmp random values
CVE-2026-108893Critical· 9.9A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003