CVE-2025-9575

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function cgiMain of the file /cgi-bin/upload.cgi. Executing manipulation of the argument filename can lead to os command injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-77
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.mdExploit, Third Party Advisory
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.md#pocExploit, Third Party Advisory
• https://vuldb.com/?ctiid.321689Permissions Required, VDB Entry
• https://vuldb.com/?id.321689Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.634840Third Party Advisory, VDB Entry
• https://www.linksys.com/Product
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.mdExploit, Third Party Advisory
• https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.md#pocExploit, Third Party Advisory

Published

Aug 28, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-9569The eHRD developed by Sunnet has a Reflected Cross-site Scri…6.1
• CVE-2025-9570The eHRD CTMS developed by Sunnet has an Arbitrary File Read…6.9
• CVE-2025-9571A remote code execution (RCE) vulnerability exists in Google…8.7
• CVE-2025-9572n authorization flaw in Foreman's GraphQL API allows low-pri…6.5
• CVE-2025-9573The ns_backup extension through 13.0.2 for TYPO3 allows comm…8.6
• CVE-2025-9574Missing Authentication for Critical Function vulnerability i…10
• CVE-2025-9576A vulnerability was identified in seeedstudio ReSpeaker Link…7
• CVE-2025-9577A security flaw has been discovered in TOTOLINK X2000R up to…7
• CVE-2025-9578Local privilege escalation due to insecure folder permission…7.8
• CVE-2025-9579A weakness has been identified in LB-LINK BL-X26 1.2.8. The …8.8
• CVE-2025-9580A security vulnerability has been detected in LB-LINK BL-X26…8.8
• CVE-2025-9581A vulnerability was detected in Comfast CF-N1 2.6.0. This im…9.8