CVE-2020-35715

PoC —

CVSS 3.1

8.8 high

EPSS

4%p89

Published

Dec 26, 2020 (Dec 26, 2020)

Modified

Jun 17, 2026

Description

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote authenticated users to execute arbitrary commands via shell metacharacters in a filename to the upload_settings.cgi page.

Vendors: linksys
Products: re6500 firmware
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news0 stories

No ingested article mentions this CVE yet.