Login Request a demo
EF
Product
E5600 Firmware
by Linksys · last CVE Dec 23, 2025
18
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 8High 4Medium 6Low 0
Severity
All severities18Critical8High4Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add E5600 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-29229
9.8
1%
Dec 23
linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus
Affected: 1.1.0.26
CVE-2025-29228
9.8
1%
Dec 23
Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter
Affected: 1.1.0.26
CVE-2025-45491
9.8
2%
May 6
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter
Affected: 1.1.0.26
CVE-2025-45490
9.8
2%
May 6
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter
Affected: 1.1.0.26
CVE-2025-45489
9.8
2%
May 6
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter
Affected: 1.1.0.26
CVE-2025-45488
9.8
12%
May 6
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter
Affected: 1.1.0.26
CVE-2025-45487
9.8
12%
May 6
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function
Affected: 1.1.0.26
CVE-2024-33789
9.8
2%
May 3
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint
Affected: 1.1.0.26
CVE-2025-29230
8.6
1%
Mar 21
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.emailReg function
Affected: 1.1.0.26
CVE-2025-9146
8.1
1%
Aug 19
A flaw has been found in Linksys E5600 1.1.0.26
Affected: 1.1.0.26
CVE-2024-33788
8.0
2%
May 6
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint
Affected: 1.1.0.26
CVE-2023-30305
7.5
0%
May 28
An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service
Affected: All versions, or not specified
CVE-2025-29227
6.3
1%
Mar 21
In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["pkgsize"] parameter
Affected: 1.1.0.26
CVE-2025-29226
6.3
1%
Mar 21
In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["count"] parameter
Affected: 1.1.0.26
CVE-2025-29223
6.3
1%
Mar 21
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the pt parameter in the traceRoute function
Affected: 1.1.0.26
CVE-2025-29231
6.1
0%
Dec 16
A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted…
Affected: 1.1.0.26
CVE-2025-22997
4.8
0%
Jan 15
A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver
Affected: 1.1.0.26
CVE-2025-22996
4.8
0%
Jan 15
A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of Linksys E5600 Router Ver
Affected: 1.1.0.26
Showing 18