CVE-2026-86299

A vulnerability was detected in Linksys RE7000 2.0.15. This affects the function platform_event_pingTest of the file /cgi-bin/json.cgi?PingTest of the component PingTest Handler. The manipulation of the argument pingTestIp/pingTestPktSize/pingTestTimes results in os command injection. The attack can be launched remotely. The exploit is now public and may be used.

• CWE-77
• CWE-78

• https://github.com/limou89/somevul/blob/main/Linksys_RE7000_v2_PingTest_Command_Injection.md
• https://vuldb.com/cve/CVE-2026-86299
• https://vuldb.com/submit/906547
• https://vuldb.com/vuln/399463
• https://vuldb.com/vuln/399463/cti
• https://www.linksys.com/

Published

Sep 7, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86293A flaw has been found in SourceCodester Simple Traffic Offen…6.5
• CVE-2026-86294A vulnerability has been found in SourceCodester Simple Traf…4.3
• CVE-2026-86295A vulnerability was found in D-Link DIR-895L A1_102b07. This…8.3
• CVE-2026-86296A vulnerability was determined in D-Link DIR-822A A_101. Thi…10
• CVE-2026-86297A vulnerability was identified in D-Link DIR-605 B1v202WWB03…8.1
• CVE-2026-86298A security flaw has been discovered in SourceCodester Class …7.3
• CVE-2026-8630justhtml before 1.12.0 (versions <= 1.11.0) contains a mutat…6.1
• CVE-2026-86300A flaw has been found in Tenda AC9 15.03.05.14. This impacts…7.3
• CVE-2026-86301A vulnerability has been found in code-projects Hospital Inf…3.5
• CVE-2026-86302A vulnerability was found in code-projects Hospital Informat…5.3
• CVE-2026-86303A vulnerability was determined in 92181 markdown up to 058ca…7.3
• CVE-2026-86304MojoX::Authentication versions before 0.006 for Perl allow S…