← Database

CVE-2026-86299

CRITICAL CVSS: 9.9 Published: 2026-09-07 Modified: 2026-09-11

Description

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.

Affected Platforms

Unknown

Weakness Type

CWE-77, CWE-78

References