Threats affecting pkg:github/linksys/E5600

CVE-2026-121616 is an out-of-bounds write vulnerability in the Linksys E5600 router firmware version 1.1.0.26. It occurs in the strcpy function within the /cgi-bin/mesh_login.cgi component's JSON Request Parser when processing certain arguments such as username, password, token, source, cn, or action. The vulnerability can be triggered remotely without authentication. Exploit code is publicly available. The affected product is no longer supported by the vendor, and no patch or vendor response has been provided.