---
id: CVE-2026-127273
title: Linksys EA8100 JNAP API IsAdminPasswordDefault missing authentication
summary: >-
  A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects
  the function GetWANStatus/GetWANStatus3/IsAdminPasswordDefault of the
  component JNAP API. The manipulation leads to missing authentication. The
  attack is possibl…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-306
  - CWE-287
vendor: Linksys
product: EA8100
affected:
  - EA8100 1.0.3.216940
published: '2026-11-12'
updated: '2026-11-12'
sourceUpdated: '2026-11-12T23:15:19.116Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-127273'
references:
  - url: 'https://vuldb.com/vuln/436428'
    label: >-
      VDB-436428 | Linksys EA8100 JNAP API IsAdminPasswordDefault missing
      authentication
  - url: 'https://vuldb.com/vuln/436428/cti'
    label: 'VDB-436428 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-127273'
    label: CVE-2026-127273 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1040994'
    label: >-
      Submit #1040994 | Linksys EA8100 Router 1.0.3.216940 Missing
      Authentication
  - url: >-
      https://github.com/geo-chen/oss/blob/main/Linksys.md#finding-1-unauthenticated-network-reconnaissance-via-getwanstatusgetwanstatus3isadminpassworddefault-exploitable-cross-origin-via-dns-rebinding
  - url: 'https://www.linksys.com/'
tags:
  - cve.org
ingestedAt: '2026-11-13T00:18:16.521Z'
---

## Overview

A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects the function GetWANStatus/GetWANStatus3/IsAdminPasswordDefault of the component JNAP API. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `EA8100 1.0.3.216940`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.