CVE-2026-121931Critical· 9.1▾ MidnightA security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument traceroute_ip lea…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 50.1 · likelihood 0.5 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
2.7%
A security vulnerability has been detected in Linksys WRT54GL 4.30.18. The impacted element is the function system of the file apply.cgi of the component Traceroute Diagnostic Function. Such manipulation of the argument traceroute_ip leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
WRT54GL 4.30.18Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-121930Critical· 9.1Linksys WRT54GL Ping Diagnostic apply.cgi system os command injection
CVE-2026-121932Critical· 10.0Linksys E5350 apply.cgi system os command injection
CVE-2026-108896Critical· 9.9A vulnerability was found in Linksys E1700 1.0.0.4.003
CVE-2026-108895Critical· 9.9A weakness has been identified in Linksys E1700 1.0.0.4.003
CVE-2026-108894Critical· 9.9A security flaw has been discovered in Linksys E1700 1.0.0.4.003
CVE-2026-86299Critical· 9.9A vulnerability was detected in Linksys RE7000 2.0.15