#linksys — Public Fediverse posts

How one #GPL #lawsuit accidentally created the homelab router that changed #networking forever

source: howtogeek.com/a-legal-accident…

It didn't take long for a group to take this source #code, inspect it, and start to modify it. This was #OpenWrt and it changed everything. By loading modified #firmware on the little Linksys, it was possible to unlock or add features that #Linksys did not intend for that model or price bracket.

#news #freedom #wifi #router #opensource #foss #floss #software #hardware #economy #law #community #story #history #development #coder

🚨 HIGH severity (CVSS 8.6) OS command injection in Linksys MR9600 (2.0.6.206937) — CVE-2026-6992. Remote attackers can gain control via the 'pin' argument. Exploit is public, no fix yet. Restrict remote access & monitor closely. https://radar.offseq.com/threat/cve-2026-6992-os-command-injection-in-linksys-mr96-18ae6106 #OffSeq #Vulnerability #Linksys

CVE Alert: CVE-2026-6992 - Linksys - MR9600 - https://www.redpacketsecurity.com/cve-alert-cve-2026-6992-linksys-mr9600/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6992 #linksys #mr9600

CVE Alert: CVE-2026-6992 - Linksys - MR9600 - https://www.redpacketsecurity.com/cve-alert-cve-2026-6992-linksys-mr9600/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-6992 #linksys #mr9600

@antdude @rstevens I have one of those wrt54gl's mounted on my ice cream truck power-wheels car for development telemetry!

#ppprs #gokart #wifi #linksys

@antdude @rstevens I have one of those wrt54gl's mounted on my ice cream truck power-wheels car for development telemetry!

#ppprs #gokart #wifi #linksys

CVE Alert: CVE-2026-4558 - Linksys - MR9600 - https://www.redpacketsecurity.com/cve-alert-cve-2026-4558-linksys-mr9600/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-4558 #linksys #mr9600

CVE Alert: CVE-2026-4558 - Linksys - MR9600 - https://www.redpacketsecurity.com/cve-alert-cve-2026-4558-linksys-mr9600/

#OSINT #ThreatIntel #CyberSecurity #cve-2026-4558 #linksys #mr9600

@web_martin @fds2610 Es gibt keinen offiziellen Weg von #Amazon. Jetzt hat jemand einen #Exploit entwickelt, der den Bootloader entsperrt und den Weg für CustomROMs freimacht.
#LineageOS bietet sich an, da es #OpenSource ist und für den Betrieb auf unterschiedlichster Hardware vorbereitet ist.

So ähnlich läuft es schon seit Jahrzehnten. #DBox2, #Linksys #WRT54G, Windows Mobile PDAs,... bei allen wurde die #Firmware reversed und dann wurden Alternativen entwickelt.
Teilweise sind aus diesen Entwicklungen neue Produkte, Firmen oder Communities entstanden.

DBox2->#Dreambox->div. #Linux Receiver

Linksys WRT54G->#OpenWRT/#DD-WRT->z.B. Gli.NET

Ob man diesen anfänglichen Versuchen vertraut, bleibt natürlich jedem selbst überlassen. Ich find's jedenfalls super. Endlich geht sowas mal wieder 😀

@web_martin @fds2610 Es gibt keinen offiziellen Weg von #Amazon. Jetzt hat jemand einen #Exploit entwickelt, der den Bootloader entsperrt und den Weg für CustomROMs freimacht.
#LineageOS bietet sich an, da es #OpenSource ist und für den Betrieb auf unterschiedlichster Hardware vorbereitet ist.

So ähnlich läuft es schon seit Jahrzehnten. #DBox2, #Linksys #WRT54G, Windows Mobile PDAs,... bei allen wurde die #Firmware reversed und dann wurden Alternativen entwickelt.
Teilweise sind aus diesen Entwicklungen neue Produkte, Firmen oder Communities entstanden.

DBox2->#Dreambox->div. #Linux Receiver

Linksys WRT54G->#OpenWRT/#DD-WRT->z.B. Gli.NET

Ob man diesen anfänglichen Versuchen vertraut, bleibt natürlich jedem selbst überlassen. Ich find's jedenfalls super. Endlich geht sowas mal wieder 😀

It would be interesting to hear the original justification for adding the following to the #Linksys MX4200 iptables:

-A INPUT -i eth0 -j wan2self
-A wan2self -j wan2self_ports
-A wan2self_ports -p tcp -m tcp --sport 5222 -j xlog_accept_wan2self
-A xlog_accept_wan2self -j ACCEPT

It's not often you see something that is so difficult to argue to be something else than a deliberate #backdoor. https://seclists.org/fulldisclosure/2026/Feb/19

It would be interesting to hear the original justification for adding the following to the #Linksys MX4200 iptables:

-A INPUT -i eth0 -j wan2self
-A wan2self -j wan2self_ports
-A wan2self_ports -p tcp -m tcp --sport 5222 -j xlog_accept_wan2self
-A xlog_accept_wan2self -j ACCEPT

It's not often you see something that is so difficult to argue to be something else than a deliberate #backdoor. https://seclists.org/fulldisclosure/2026/Feb/19

Bring out yer path traversal memes!!

https://seclists.org/fulldisclosure/2026/Feb/10

#linksys #vulnerability

Bring out yer path traversal memes!!

https://seclists.org/fulldisclosure/2026/Feb/10

#linksys #vulnerability

Plethore of critical #Linksys MX4200 Wi-Fi router vulnerabilities (that were originally reported to Linksys nearly a year ago!) are still unfixed:

- [SYSS-2025-001] Linksys MX9600/MX4200 - Path Traversal https://seclists.org/fulldisclosure/2026/Feb/10
- [SYSS-2025-002] Linksys MX9600/MX4200 - Missing Authentication for Critical Function https://seclists.org/fulldisclosure/2026/Feb/11
- [SYSS-2025-009] Linksys MX9600/MX4200 - SQL Injection https://seclists.org/fulldisclosure/2026/Feb/12
- [SYSS-2025-010] Linksys MX9600/MX4200 - OS Command Injection https://seclists.org/fulldisclosure/2026/Feb/13
- [SYSS-2025-011] Linksys MX9600/MX4200 - OS Command Injection https://seclists.org/fulldisclosure/2026/Feb/18
- [SYSS-2025-014] Linksys MX4200 - Improper Verification of Source of a Communication Channel
https://seclists.org/fulldisclosure/2026/Feb/19

On first read it might appear that many of these vulnerabilities would only be exploitable by accessing the device non-WAN interface(s) from inside the local network. However, due to the SYSS-2025-014 vulnerability the normally "LAN only RCE" vulnerabilities (SYSS-2025-010 and -011) and SQL injection (SYSS-2025-009) can be performed from the WAN interface (read: the internet). The attacker merely needs to make the connection originate from port 5222 (which is trivial to arrange via local bind before connect).

Update: Users of Linksys MX4200 should upgrade to firmware version 2.0.7.216620 or later. While not all of the security issues are fixed, it at least should stop the attacks via the WAN interface (SYSS-2025-014). https://support.linksys.com/kb/article/952-en/

#linksys #fulldisclosure #vulnerability #infosec #cybersecurity

Plethore of critical #Linksys MX4200 Wi-Fi router vulnerabilities (that were originally reported to Linksys nearly a year ago!) are still unfixed:

- [SYSS-2025-001] Linksys MX9600/MX4200 - Path Traversal https://seclists.org/fulldisclosure/2026/Feb/10
- [SYSS-2025-002] Linksys MX9600/MX4200 - Missing Authentication for Critical Function https://seclists.org/fulldisclosure/2026/Feb/11
- [SYSS-2025-009] Linksys MX9600/MX4200 - SQL Injection https://seclists.org/fulldisclosure/2026/Feb/12
- [SYSS-2025-010] Linksys MX9600/MX4200 - OS Command Injection https://seclists.org/fulldisclosure/2026/Feb/13
- [SYSS-2025-011] Linksys MX9600/MX4200 - OS Command Injection https://seclists.org/fulldisclosure/2026/Feb/18
- [SYSS-2025-014] Linksys MX4200 - Improper Verification of Source of a Communication Channel
https://seclists.org/fulldisclosure/2026/Feb/19

On first read it might appear that many of these vulnerabilities would only be exploitable by accessing the device non-WAN interface(s) from inside the local network. However, due to the SYSS-2025-014 vulnerability the normally "LAN only RCE" vulnerabilities (SYSS-2025-010 and -011) and SQL injection (SYSS-2025-009) can be performed from the WAN interface (read: the internet). The attacker merely needs to make the connection originate from port 5222 (which is trivial to arrange via local bind before connect).

Update: Users of Linksys MX4200 should upgrade to firmware version 2.0.7.216620 or later. While not all of the security issues are fixed, it at least should stop the attacks via the WAN interface (SYSS-2025-014). https://support.linksys.com/kb/article/952-en/

#linksys #fulldisclosure #vulnerability #infosec #cybersecurity

Had half day off today.
Thought I'd "simply" set up some #vlan: one main, one #IoT, and one for my #poe ip cameras.
It took some work to set it up on my #GL.iNET #Flint3 #router, my
#Linksys #LGS528P was simple to setup
But after some tweaking (8 hours later) it seems all is now going well.
Even @homeassistant works in the new setup

Had half day off today.
Thought I'd "simply" set up some #vlan: one main, one #IoT, and one for my #poe ip cameras.
It took some work to set it up on my #GL.iNET #Flint3 #router, my
#Linksys #LGS528P was simple to setup
But after some tweaking (8 hours later) it seems all is now going well.
Even @homeassistant works in the new setup

CVE Alert: CVE-2025-14136 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14136-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14136 #linksys #re6500

CVE Alert: CVE-2025-14134 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14134-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14134 #linksys #re6500

CVE Alert: CVE-2025-14135 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14135-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14135 #linksys #re6500

CVE Alert: CVE-2025-14133 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14133-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14133 #linksys #re6500

CVE Alert: CVE-2025-14136 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14136-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14136 #linksys #re6500

CVE Alert: CVE-2025-14134 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14134-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14134 #linksys #re6500

CVE Alert: CVE-2025-14135 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14135-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14135 #linksys #re6500

CVE Alert: CVE-2025-14133 - Linksys - RE6500 - https://www.redpacketsecurity.com/cve-alert-cve-2025-14133-linksys-re6500/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-14133 #linksys #re6500

@dashdsrdash @kim @FLOX_advocate It is usually not regular computers or servers that are a problem. It is all the embedded devices that are the issue. I have an old crappy 8 port #dlink smartswitch, a #vonage #linksys VOIP device, an #epson eco-tank printer, and a #roku premiere from them that is holding me back from moving #ipv6 .

@dashdsrdash @kim @FLOX_advocate It is usually not regular computers or servers that are a problem. It is all the embedded devices that are the issue. I have an old crappy 8 port #dlink smartswitch, a #vonage #linksys VOIP device, an #epson eco-tank printer, and a #roku premiere from them that is holding me back from moving #ipv6 .

@dashdsrdash @kim @FLOX_advocate It is usually not regular computers or servers that are a problem. It is all the embedded devices that are the issue. I have an old crappy 8 port #dlink smartswitch, a #vonage #linksys VOIP device, an #epson eco-tank printer, and a #roku premiere from them that is holding me back from moving #ipv6 .

@dashdsrdash @kim @FLOX_advocate It is usually not regular computers or servers that are a problem. It is all the embedded devices that are the issue. I have an old crappy 8 port #dlink smartswitch, a #vonage #linksys VOIP device, an #epson eco-tank printer, and a #roku premiere from them that is holding me back from moving #ipv6 .

some linux nerds: *does all this work for an old GPU or audio card to work*

me: *remembers trying to get a #Linksys WUSB11/WUSB54G to work over period-correct Distros with #ndiswrapper and could never get anywhere* now that's a challenge I'd wanna see accomplished.
Given enough grit, could I've actually figured it out and got it working or was I 100% doomed?

CVE Alert: CVE-2025-9527 - Linksys - E1700 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9527-linksys-e1700/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9527 #linksys #e1700

CVE Alert: CVE-2025-9527 - Linksys - E1700 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9527-linksys-e1700/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9527 #linksys #e1700

CVE Alert: CVE-2025-9525 - Linksys - E1700 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9525-linksys-e1700/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9525 #linksys #e1700

CVE Alert: CVE-2025-9526 - Linksys - E1700 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9526-linksys-e1700/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9526 #linksys #e1700

CVE Alert: CVE-2025-9525 - Linksys - E1700 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9525-linksys-e1700/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9525 #linksys #e1700

CVE Alert: CVE-2025-9526 - Linksys - E1700 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9526-linksys-e1700/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9526 #linksys #e1700

CVE Alert: CVE-2025-9393 - Linksys - RE6250 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9393-linksys-re6250/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9393 #linksys #re6250

CVE Alert: CVE-2025-9392 - Linksys - RE6250 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9392-linksys-re6250/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9392 #linksys #re6250

CVE Alert: CVE-2025-9392 - Linksys - RE6250 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9392-linksys-re6250/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9392 #linksys #re6250

CVE Alert: CVE-2025-9393 - Linksys - RE6250 - https://www.redpacketsecurity.com/cve-alert-cve-2025-9393-linksys-re6250/

#OSINT #ThreatIntel #CyberSecurity #cve-2025-9393 #linksys #re6250

So here is my new #OPNsense Router.
My old router is a #Linksys WRT3200ACM running #DDWRT & it's blue, so I called it #Tachikoma from #GhostInTheShell.
So went with the same theme here.
I am really happy with it😁.
I'm still getting for feel for OPNsense & where everything is
I've been playing with Suricata & I got Zenarmor installed.

For more info about my network setup & more Pic's
Click The Link: https://pcpartpicker.com/b/sK3ypg

#Intel #OPNsense #Firewall #Router #Suricata #Zenarmor #FreeBSD #InFoSec

So here is my new #OPNsense Router.
My old router is a #Linksys WRT3200ACM running #DDWRT & it's blue, so I called it #Tachikoma from #GhostInTheShell.
So went with the same theme here.
I am really happy with it😁.
I'm still getting for feel for OPNsense & where everything is
I've been playing with Suricata & I got Zenarmor installed.

For more info about my network setup & more Pic's
Click The Link: https://pcpartpicker.com/b/sK3ypg

#Intel #OPNsense #Firewall #Router #Suricata #Zenarmor #FreeBSD #InFoSec

Fortinet 傘下となった #Linksys が #OpenWrt を採用したルータで日本再参入とのこと。信頼性に重点を置いたハードウェアで OpenWrt を採用しているモデルは特に国内では珍しいので興味深い。OpenWrt は Linksys 製ルータの代替ファームウェアとして開発が始まったことを考えると感慨深い，かも。

https://internet.watch.impress.co.jp/docs/event/2023659.html
https://akiba-pc.watch.impress.co.jp/docs/news/news/2027141.html

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability is exploited in the wild by the "TheMoon" worm.

#vulnerability #cybersecurity #cve #linksys

🔗 https://vulnerability.circl.lu/vuln/cve-2025-34037

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability is exploited in the wild by the "TheMoon" worm.

#vulnerability #cybersecurity #cve #linksys

🔗 https://vulnerability.circl.lu/vuln/cve-2025-34037

Stealthy backdoor found hiding in SOHO devices running Linux https://www.helpnetsecurity.com/2025/06/23/lapdogs-shortleash-backdoor-linux-soho-devices/ #SecurityScorecard #securitycameras #RuckusNetworks #cybercrime #Don'tmiss #Microsoft #backdoor #hardware #Synology #Linksys #D-Link #router #China #Cisco #News #Asus #CISO

Stealthy backdoor found hiding in SOHO devices running Linux https://www.helpnetsecurity.com/2025/06/23/lapdogs-shortleash-backdoor-linux-soho-devices/ #SecurityScorecard #securitycameras #RuckusNetworks #cybercrime #Don'tmiss #Microsoft #backdoor #hardware #Synology #Linksys #D-Link #router #China #Cisco #News #Asus #CISO

Warum das #FBI aktuell vor unsicheren #Routern warnt - und wo die Hersteller unbedingt noch nachbessern müssen: Verschiedene Router-Modelle von #Linksys sind mit Schwachstellen behaftet und sollten deshalb nicht mehr verwendet werden.

Nach wie vor werden im Netzwerk die WLAN-Router nicht regelmäßig auf ihre #Cybersecurity hin überprüft - oder sind abgekündigte und daher ungepatchte Auslaufmodelle, was dabei hilft, diese zu kompromittieren und in Botnetze zu integrieren:

https://www.ic3.gov/CSA/2025/250507.pdf

Warum das #FBI aktuell vor unsicheren #Routern warnt - und wo die Hersteller unbedingt noch nachbessern müssen: Verschiedene Router-Modelle von #Linksys sind mit Schwachstellen behaftet und sollten deshalb nicht mehr verwendet werden.

Nach wie vor werden im Netzwerk die WLAN-Router nicht regelmäßig auf ihre #Cybersecurity hin überprüft - oder sind abgekündigte und daher ungepatchte Auslaufmodelle, was dabei hilft, diese zu kompromittieren und in Botnetze zu integrieren:

https://www.ic3.gov/CSA/2025/250507.pdf