Skip to content
CVE PROGRAM SOURCE RECORD9.4 Critical

CVE-2026-86299

Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection

Description

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linksys RE7000

  • 2.0.15affected

References