CVE-2025-9527

CVE-2025-9527 affects Linksys E1700 (v1.0.0.4.003). The vulnerability is a stack-based overflow in the QoSSetup function exposed via /goform/QoSSetup when the ack_policy argument is manipulated. This can be triggered remotely and has been disclosed publicly, with the vendor reportedly unresponsiv...