CVE-2026-86299

CriticalCVSS 9.9

Published: 07/09/2026(UTC)Translated: 07/09/2026(UTC)NVD NIST

Summary

A vulnerability was detected in Linksys RE7000 2.0.15. It affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest in the PingTest Handler component. Manipulation of the arguments pingTestIp/pingTestPktSize/pingTestTimes results in OS command injection. The attack can be launched remotely. The exploit is now public and may be used.

Risk Assessment

The risk includes remote command execution on the device, potentially leading to device and network compromise.

Recommendation

It is recommended to update the Linksys RE7000 firmware immediately if a patch is available, and restrict access to the administrative interface.

Other vulnerabilities in Linksys RE7000

CVE-2025-60696High
A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW_v2.0.15_211230_1012). The arplookup function parses lines from /proc/net/arp using sscanf, allowing oversized input to overflow buffers (12 and 20 bytes). Local attackers controlling /proc/net/arp contents can cause stack corruption, leading to denial of service or potential arbitrary code execution.

Original NVD description (English source)

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.