CVE-2026-121618: Linksys E5600 Factory Quality Control fqc.cgi information disclosure
A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of the component Factory Quality Control. This manipulation causes information disclosure. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
Event History
Frequently Asked Questions
Which systems are exposed?
Linksys E5600 devices running version 1.1.0.26 are identified as affected. The issue only affects products that are no longer supported by the maintainer.
Does exploitation require authentication or local access?
No. The vulnerability is remotely exploitable, and the supplied severity vector indicates no privileges or user interaction are required.
How urgent is remediation?
A public exploit is available, which could be used in attacks. The vendor did not respond to the disclosure, and the affected product is unsupported.