CVE-2026-127277Critical· 10.0▾ MidnightA security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS re…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 55 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS results in improper initialization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
EA8100 1.0.3.216940Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-127276Low· 3.7Linksys EA8100 Web UI cookie httponly flag
CVE-2026-127274Low· 3.7Linksys EA8100 CheckAdminPassword excessive authentication
CVE-2026-127273Medium· 4.3Linksys EA8100 JNAP API IsAdminPasswordDefault missing authentication
CVE-2026-127275Critical· 10.0Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication
CVE-2026-121933Critical· 10.0Linksys E5350 Setup Wizard apply.cgi save_settings missing authentication
CVE-2026-121932Critical· 10.0Linksys E5350 apply.cgi system os command injection