Linksys vendor intelligence

Linksys Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Linksys products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse Linksys KEVs Full KEV feed

Total KEVs: 4; Known exploited vulnerabilities affecting Linksys products
In CISA KEV: 0; Records also listed in the official catalog
Beyond CISA KEV: 4; Additional exploited CVEs absent from CISA KEV
Sensor Observed: 1; Linksys KEV with sensor-observed exploitation activity

The catalog gap matters for Linksys exposure

Four of the four exploited Linksys CVEs tracked here are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA: 100%
Beyond CISA: 4
Product families

Attested Linksys CVEs

Search the exploited-vulnerability portfolio, then narrow it to official CISA coverage or the additional records KEV Intelligence tracks beyond the catalog.

How exploitation is verified

CVE / description	Product	Confidence	CISA KEV	Added
CVE-2024-27497 Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.	E2000	High	Beyond CISA	15 Jun 2026
CVE-2025-34037 Linksys Routers E/WAG/WAP/WES/WET/WRT-Series	E4200, E3200, E3000, E2500 v1/v2, E2100L v1, E2000, E1550, E1500 v1, E1200 v1, E1000 v1, E900 v1	Confirmed	Beyond CISA	28 May 2026
CVE-2024-25852 Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control...	RE7000	High	Beyond CISA	05 Oct 2025
CVE-2025-8829 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injection	RE6250, RE6300, RE6350, RE6500, RE7000, RE9000	High	Beyond CISA	11 Aug 2025

Showing 4 of 4 Linksys known exploited vulnerabilities.

Recurring weakness patterns

Access control, neutralization, and neutralization account for five mapped occurrences across this Linksys KEV portfolio.

Browse all KEVs →

CWE-284

Improper Access Control

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

Early warning alerts

Get alerts on high-impact exploitation

Receive curator-selected alerts when exploitation activity warrants attention. Each alert includes the evidence and context needed to decide what requires attention now.