CVE-2026-121932

The Linksys E5350 (version 1.0.00.037 ) is vulnerable to OS command injection due to improper neutralization of special elements in the /wizard/apply.cgi file. Attackers can initiate the attack remotely by manipulating the ping_ip or traceroute_ip arguments. The documents confirm that an exploit ...

EUVD-2026-117050

A vulnerability was detected in Linksys E5350 1.0.00.037. This affects the function system of the file /wizard/apply.cgi. Performing a manipulation of the argument pingip/tracerouteip results in os command injection. The attack may be initiated remotely. The exploit is now public and may be used...