CVE-2025-45488: Linksys e5600 Firmware

Critical severity, CVSS 9.8. EPSS: 11.6% chance of exploitation in the next 30 days.

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter.

Affected products

• Linksys e5600 Firmware: version 1.1.0.26 only

Published 2025-05-06. Last modified 2026-06-17.