Skip to content
OpenAdvisories
Critical WID-SEC-2026-4555 5 CVEs

Linksys Router: Mehrere Schwachstellen

Published Nov 12, 2026 · Updated Nov 12, 2026 · de

Vendor: Linksys Product: Router

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Linksys Router ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen auszulesen, Daten zu manipulieren, oder nicht näher beschriebene Auswirkungen hervorzurufen.

Product

Router der Firma Linksys enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 5

  • Critical 10.0
    CVE-2026-127275

    Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication

    A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument isEnabled/enabled causes missing aut…

    Linksys EA8100
  • Critical 10.0
    CVE-2026-127277

    A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the …

    Linksys EA8100
  • Medium 6.3
    CVE-2026-127274

    A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code of the file /jnap/cor…

    Linksys EA8100
  • Medium 5.3
    CVE-2026-127273

    A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects the function GetWANStatus/GetWANStatus3/IsA…

    Linksys EA8100
  • Low 3.7
    CVE-2026-127276

    Linksys EA8100 Web UI cookie httponly flag

    A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of the component Web UI. Such manipulation leads to cookie without 'httponly' flag. It is possible to launch the attack remotely. This attack is characterized by hi…

    Linksys EA8100

Revision history

  1. #1

    Initiale Fassung

References