Live › vulnerability › CVE-2026-121618
A weakness in the Factory Quality Control CGI script (/cgi-bin/fqc.cgi) of Linksys E5600 firmware 1.1.0.26 lets a remote attacker disclose information. A public exploit exists, and the vendor did not respond to the disclosure.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-04 03:46 UTC. All times on this page are UTC.
Owners of Linksys E5600 routers running firmware 1.1.0.26, where the Factory Quality Control CGI is reachable. The sources say the product is no longer supported by the maintainer, so no patch is expected. Devices not running this firmware or without this CGI exposed are not described as affected.
No product ranges from the sources yet.
1.1.0.26/cgi-bin/fqc.cgi responds on the device from the networkNo fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A weakness has been identified in Linksys E5600 1.1.0.26. This affects an unknown part of the file /cgi-bin/fqc.cgi of the component Factory Quality Control. This manipulation causes information disclosure. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
This page as .md · .json · in your agent: get_signal("CVE-2026-121618")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.