1
CVEs
0
Critical
1
High
0
KEV
1
PoC
1
Unpatched C/H
0.0%
Patch Rate
2.0%
Avg EPSS
Severity Breakdown
CRITICAL
0
HIGH
1
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Re6500 Firmware
50
Re7000 Firmware
49
Re6300 Firmware
48
Re9000 Firmware
47
Re6250 Firmware
47
Re6350 Firmware
47
E5600 Firmware
14
E1200 Firmware
10
E8450 Firmware
10
E7350 Firmware
8
E1700 Firmware
5
E2500 Firmware
5
Ea6500
5
Ea6500 Firmware
5
Wrt54Gl Firmware
4
Ea4500 Firmware
3
E2000 Firmware
3
Ea6700 Firmware
2
Wrt1900Acs Firmware
2
Ea6400
2
Ea6900
2
E4200V2 Firmware
2
Ea3500
2
Ea6700
2
Ea6400 Firmware
2
Mr9600 Firmware
2
Ea6300 Firmware
2
Ea2700 Firmware
2
Ea4500
2
Ea6200 Firmware
2
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-86299 | OS command injection in Linksys RE7000 firmware 2.0.15 allows authenticated low-privilege attackers to execute arbitrary commands on the device by manipulating the pingTestIp, pingTestPktSize, or pingTestTimes parameters of the PingTest CGI handler. The /cgi-bin/json.cgi?PingTest endpoint passes these parameters unsanitized to underlying shell commands, resulting in full device compromise and potential impact to adjacent network infrastructure. A public proof-of-concept exploit is available on GitHub, substantially lowering the exploitation barrier. | HIGH | 8.6 | 2.0% | 65 |
PoC
No patch
|