CVE-2025-60696

A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW_v2.0.15_211230_1012). The arplookup function parses lines from /proc/net/arp using sscanf("%16s ... %18s ..."), storing results into buffers v6 (12 bytes) and v7 (20 bytes). Since the format specifiers allow up to 16 and 18 bytes respectively, oversized input can overflow the buffers, resulting in stack corruption. Local attackers controlling /proc/net/arp contents can exploit this issue to cause denial of service or potentially execute arbitrary code.

• CWE-121

• https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-RE700/CVE-2025-60696.mdExploit, Third Party Advisory
• https://www.linksys.com/Product

Published

Nov 13, 2025

Last Modified

Jul 5, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-60690A stack-based buffer overflow exists in the get_merge_ipaddr…8.8
• CVE-2025-60691A stack-based buffer overflow exists in the httpd binary of …8.8
• CVE-2025-60692A stack-based buffer overflow vulnerability exists in the li…8.4
• CVE-2025-60693A stack-based buffer overflow exists in the get_merge_mac fu…6.5
• CVE-2025-60694A stack-based buffer overflow exists in the validate_static_…7.5
• CVE-2025-60695A stack-based buffer overflow vulnerability exists in the mt…5.9
• CVE-2025-60697A command injection vulnerability exists in the D-Link DIR-8…7.3
• CVE-2025-60698A command injection vulnerability exists in the D-Link DIR-8…7.3
• CVE-2025-60699A buffer overflow vulnerability exists in the TOTOLINK A950R…6.5
• CVE-2025-6070The Restrict File Access plugin for WordPress is vulnerable …6.5
• CVE-2025-60700A command injection vulnerability exists in the D-Link DIR-8…6.5
• CVE-2025-60701A command injection vulnerability exists in the D-Link DIR-8…6.5