Linksys vendor intelligence

Linksys Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting Linksys products, including the gap beyond CISA KEV, confidence assessments, sensor observations, and practical response context.

Browse KEV feed
Total KEVs
4
Known exploited vulnerabilities affecting Linksys products
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
4
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
1
Linksys KEV with sensor-observed exploitation activity

The catalog gap matters for Linksys exposure

All four exploited Linksys vulnerabilities tracked by Previdian are not in CISA KEV. Teams relying on the official catalog alone would miss 100% of this vendor portfolio.

0%
Covered by CISA
100%
Beyond CISA
4
Product families

Attested Linksys vulnerabilities

4 known exploited vulnerabilities in this exploited-vulnerability portfolio. Search, then narrow it to official CISA coverage or the additional records Previdian tracks beyond the catalog.

How exploitation is verified
CVE / description Product Confidence CISA KEV Added
CVE-2024-27497

Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

 E2000 High Beyond CISA 15 Jun 2026
CVE-2025-34037

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

 E4200, E3200, E3000, E2500 v1/v2, E2100L v1, E2000, E1550, E1500 v1, E1200 v1, E1000 v1, E900 v1 High Beyond CISA 28 May 2026
CVE-2024-25852

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control...

 RE7000 High Beyond CISA 05 Oct 2025
CVE-2025-8829

Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injection

 RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 High Beyond CISA 11 Aug 2025

Showing 4 of 4 on this page (4 Linksys known exploited vulnerabilities).

Recurring weakness patterns

Access control, neutralization, and neutralization account for five mapped occurrences across this Linksys KEV portfolio.

Browse all KEVs →

CWE-284

Improper Access Control

2

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

2

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

1