CVE-2025-9356

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function inboundFilterAdd of the file /goform/inboundFilterAdd. Executing manipulation of the argument ruleName can lead to stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-119
• CWE-121

• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.mdExploit, Third Party Advisory
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md#pocThird Party Advisory
• https://vuldb.com/?ctiid.321059Permissions Required
• https://vuldb.com/?id.321059Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.631528Third Party Advisory, VDB Entry
• https://www.linksys.com/Product
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.mdExploit, Third Party Advisory
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md#pocThird Party Advisory

Published

Aug 22, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9344The UsersWP – Front-end login form, User Registration, User …6.4
• CVE-2025-9345The File Manager, Code Editor, and Backup by Managefy plugin…4.9
• CVE-2025-9346The Booking Calendar plugin for WordPress is vulnerable to S…6.4
• CVE-2025-9352The Pronamic Google Maps plugin for WordPress is vulnerable …5.4
• CVE-2025-9353The Themify Builder plugin for WordPress is vulnerable to St…6.4
• CVE-2025-9355A vulnerability was found in Linksys RE6250, RE6300, RE6350,…8.8
• CVE-2025-9357A vulnerability was identified in Linksys RE6250, RE6300, RE…8.8
• CVE-2025-9358A security flaw has been discovered in Linksys RE6250, RE630…8.8
• CVE-2025-9359A weakness has been identified in Linksys RE6250, RE6300, RE…8.8
• CVE-2025-9360A security vulnerability has been detected in Linksys RE6250…8.8
• CVE-2025-9361A vulnerability was detected in Linksys RE6250, RE6300, RE63…8.8
• CVE-2025-9362A flaw has been found in Linksys RE6250, RE6300, RE6350, RE6…8.8