{"id":"CVE-2026-86299","title":"A vulnerability was detected in Linksys RE7000 2.0.15","summary":"A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSiz…","severity":"critical","cvss":9.9,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwe":["CWE-77","CWE-78"],"vendor":"Linksys","product":"RE7000","affected":["RE7000 2.0.15"],"published":"2026-09-07","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:44.440","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86299","references":[{"url":"https://github.com/limou89/somevul/blob/main/Linksys_RE7000_v2_PingTest_Command_Injection.md","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86299","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/906547","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399463","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399463/cti","label":"cna@vuldb.com"},{"url":"https://www.linksys.com/","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"total","timestamp":"2026-09-11T20:15:44.006697Z"},"epss":0.01977,"epssPercentile":0.79366,"ingestedAt":"2026-09-08T15:33:26.976Z","slug":"CVE-2026-86299","body":"## Overview\n\nA vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":67,"depthScoreParts":{"impact":54.5,"likelihood":0.4,"exploitation":12,"ransomware":0},"changes":[{"seq":202119,"id":"CVE-2026-86299","ts":1789400062988,"field":"exploit_available","old":"false","new":"true"},{"seq":200846,"id":"CVE-2026-86299","ts":1789397616961,"field":"exploit_available","old":"true","new":"false"},{"seq":199539,"id":"CVE-2026-86299","ts":1789395529525,"field":"exploit_available","old":"false","new":"true"},{"seq":198784,"id":"CVE-2026-86299","ts":1789392244741,"field":"exploit_available","old":"true","new":"false"},{"seq":197117,"id":"CVE-2026-86299","ts":1789384292910,"field":"exploit_available","old":"false","new":"true"},{"seq":196400,"id":"CVE-2026-86299","ts":1789383756754,"field":"exploit_available","old":"true","new":"false"},{"seq":195848,"id":"CVE-2026-86299","ts":1789380634686,"field":"exploit_available","old":"false","new":"true"},{"seq":194246,"id":"CVE-2026-86299","ts":1789378783602,"field":"exploit_available","old":"true","new":"false"},{"seq":193033,"id":"CVE-2026-86299","ts":1789376515635,"field":"exploit_available","old":"false","new":"true"},{"seq":191820,"id":"CVE-2026-86299","ts":1789373631634,"field":"exploit_available","old":"true","new":"false"},{"seq":190605,"id":"CVE-2026-86299","ts":1789369476437,"field":"exploit_available","old":"false","new":"true"},{"seq":189392,"id":"CVE-2026-86299","ts":1789368425419,"field":"exploit_available","old":"true","new":"false"},{"seq":188175,"id":"CVE-2026-86299","ts":1789365231318,"field":"exploit_available","old":"false","new":"true"},{"seq":186962,"id":"CVE-2026-86299","ts":1789363471825,"field":"exploit_available","old":"true","new":"false"},{"seq":185748,"id":"CVE-2026-86299","ts":1789361229675,"field":"exploit_available","old":"false","new":"true"},{"seq":184535,"id":"CVE-2026-86299","ts":1789358364335,"field":"exploit_available","old":"true","new":"false"},{"seq":182785,"id":"CVE-2026-86299","ts":1789354317745,"field":"exploit_available","old":"false","new":"true"},{"seq":181578,"id":"CVE-2026-86299","ts":1789353318264,"field":"exploit_available","old":"true","new":"false"},{"seq":180371,"id":"CVE-2026-86299","ts":1789350285308,"field":"exploit_available","old":"false","new":"true"},{"seq":179164,"id":"CVE-2026-86299","ts":1789348293469,"field":"exploit_available","old":"true","new":"false"},{"seq":177957,"id":"CVE-2026-86299","ts":1789346370581,"field":"exploit_available","old":"false","new":"true"},{"seq":176750,"id":"CVE-2026-86299","ts":1789343185052,"field":"exploit_available","old":"true","new":"false"},{"seq":174867,"id":"CVE-2026-86299","ts":1789334876240,"field":"exploit_available","old":"false","new":"true"},{"seq":173662,"id":"CVE-2026-86299","ts":1789333700494,"field":"exploit_available","old":"true","new":"false"},{"seq":172476,"id":"CVE-2026-86299","ts":1789331093614,"field":"exploit_available","old":"false","new":"true"},{"seq":171290,"id":"CVE-2026-86299","ts":1789328781410,"field":"exploit_available","old":"true","new":"false"},{"seq":170085,"id":"CVE-2026-86299","ts":1789327197713,"field":"exploit_available","old":"false","new":"true"},{"seq":168880,"id":"CVE-2026-86299","ts":1789323840682,"field":"exploit_available","old":"true","new":"false"},{"seq":167675,"id":"CVE-2026-86299","ts":1789319703220,"field":"exploit_available","old":"false","new":"true"},{"seq":166470,"id":"CVE-2026-86299","ts":1789318776678,"field":"exploit_available","old":"true","new":"false"},{"seq":165265,"id":"CVE-2026-86299","ts":1789315791439,"field":"exploit_available","old":"false","new":"true"},{"seq":164060,"id":"CVE-2026-86299","ts":1789313634803,"field":"exploit_available","old":"true","new":"false"},{"seq":162855,"id":"CVE-2026-86299","ts":1789311904018,"field":"exploit_available","old":"false","new":"true"},{"seq":161650,"id":"CVE-2026-86299","ts":1789308733740,"field":"exploit_available","old":"true","new":"false"},{"seq":159763,"id":"CVE-2026-86299","ts":1789300471106,"field":"exploit_available","old":"false","new":"true"},{"seq":158850,"id":"CVE-2026-86299","ts":1789299572128,"field":"exploit_available","old":"true","new":"false"},{"seq":158309,"id":"CVE-2026-86299","ts":1789296693182,"field":"exploit_available","old":"false","new":"true"},{"seq":156752,"id":"CVE-2026-86299","ts":1789294756229,"field":"exploit_available","old":"true","new":"false"},{"seq":155547,"id":"CVE-2026-86299","ts":1789292968490,"field":"exploit_available","old":"false","new":"true"},{"seq":154342,"id":"CVE-2026-86299","ts":1789289798120,"field":"exploit_available","old":"true","new":"false"},{"seq":151593,"id":"CVE-2026-86299","ts":1789277630393,"field":"exploit_available","old":"false","new":"true"},{"seq":150554,"id":"CVE-2026-86299","ts":1789276248738,"field":"exploit_available","old":"true","new":"false"},{"seq":149521,"id":"CVE-2026-86299","ts":1789273825260,"field":"exploit_available","old":"false","new":"true"},{"seq":148488,"id":"CVE-2026-86299","ts":1789271349302,"field":"exploit_available","old":"true","new":"false"},{"seq":146519,"id":"CVE-2026-86299","ts":1789269398583,"field":"exploit_available","old":"false","new":"true"},{"seq":145324,"id":"CVE-2026-86299","ts":1789266340782,"field":"exploit_available","old":"true","new":"false"},{"seq":144228,"id":"CVE-2026-86299","ts":1789262617269,"field":"exploit_available","old":"false","new":"true"},{"seq":143132,"id":"CVE-2026-86299","ts":1789261533973,"field":"exploit_available","old":"true","new":"false"},{"seq":141963,"id":"CVE-2026-86299","ts":1789258832421,"field":"exploit_available","old":"false","new":"true"},{"seq":140804,"id":"CVE-2026-86299","ts":1789256727664,"field":"exploit_available","old":"true","new":"false"}]}