EA8100 vulnerabilities
CVEs whose affected-version data names the EA8100 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-127277Critical· 10.0Linksys EA8100 SMB Service service_smbd.sh initialization
A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS re…
CVE-2026-127276Low· 3.7PoCLinksys EA8100 Web UI cookie httponly flag
A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of the component Web UI. Such manipulation leads to cookie without 'httponly' flag. It is possible to launch the attack remotely. This attack …
CVE-2026-127274Low· 3.7Linksys EA8100 CheckAdminPassword excessive authentication
A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code of the file /jnap/core/CheckAdminPassword. The manipulation results in improper restriction of excessive authentication attempts. The attac…
CVE-2026-127273Medium· 4.3Linksys EA8100 JNAP API IsAdminPasswordDefault missing authentication
A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects the function GetWANStatus/GetWANStatus3/IsAdminPasswordDefault of the component JNAP API. The manipulation leads to missing authentication. The attack is possibl…
CVE-2026-127275Critical· 10.0Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication
A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument isEnabled/enab…