CVE-2025-52692

HIGH

Linksys E9450-sg Firmware - Missing Authentication

Title source: rule

Description

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials.

Exploits (1)

nomisec WORKING POC

by yt2w · poc

https://github.com/yt2w/CVE-2025-52692

View Code ZIP pw:eip

References (1)

[Third Party Advisory, Exploit] https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-118/

Scores

CVSS v3 8.8

EPSS 0.0005

EPSS Percentile 15.0%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-306

Status published

Products (1)

linksys/e9450-sg_firmware 1.2.00.052

Published Dec 19, 2025

Tracked Since Feb 18, 2026