High (8.3). EPSS 63% chance of exploitation in the next 30 days.
Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
Severity
CVSS 3.1
8.3 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
EPSS
63% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)