CVE-2025-45489: Linksys e5600 Firmware

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter.

Affected products

• Linksys e5600 Firmware: version 1.1.0.26 only

Published 2025-05-06. Last modified 2026-06-17.