CVE-2026-86299: Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platformeventpingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What level of access does an attacker need?
The attack vector is network-based, but the CVSS vector lists privileges required as low. An attacker therefore needs low-level authenticated access or equivalent privileges before exploiting the issue.
Which deployments are known to be affected?
The reported affected product and version is the Cisco Linksys RE7000 running version 2.0.15. No information is provided about other versions, models, or default configurations.
Is exploitation likely to be practical?
The vulnerability has low attack complexity and requires no user interaction. A public exploit is reported to exist, which may increase the likelihood of attempted exploitation.
Which request parameters should defenders prioritize when reviewing logs or controls?
The affected handler processes the pingTestIp, pingTestPktSize, and pingTestTimes arguments. Review access and application logs for requests to /cgi-bin/json.cgi?PingTest containing unexpected or shell-like values in those parameters.