CVE-2024-36821: Linksys Velop WHW0101 Firmware

Medium severity, CVSS 6.8. EPSS: 2.9% chance of exploitation in the next 30 days.

Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.

Affected products

• Linksys Velop WHW0101 Firmware: version 1.1.13.202617 only

Published 2024-06-11. Last modified 2026-06-17.