CVE-2025-9252

The CVE affects Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 devices (firmware versions 1.0.013.001–1.2.07.001) where the DisablePasswordAlertRedirect function in /goform/DisablePasswordAlertRedirect is vulnerable to a stack-based buffer overflow when the hint parameter is manipulated. This ...