CVE-2026-121618Medium· 5.3▾ SunlitA weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of the component Factory Quality Control. This manipulation causes information disclosure. Remote exploitation of the att…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.2 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.8%
A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of the component Factory Quality Control. This manipulation causes information disclosure. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
E5600 1.1.0.26Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121617High· 7.5Linksys E5600 Header upload_fw.cgi init_multipart out-of-bounds write
CVE-2026-121616Medium· 5.3Linksys E5600 JSON Request mesh_login.cgi strcpy out-of-bounds write
CVE-2026-121615Critical· 10.0Linksys E5600 Login mesh_login.cgi improper authentication
CVE-2026-121933Critical· 10.0Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication
CVE-2026-121932Critical· 10.0Linksys E5350 apply.cgi system os command injection
CVE-2026-121931Critical· 9.1Linksys WRT54GL Traceroute Diagnostic Function apply.cgi system os command injection