Low 3.7

A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code...

CVE-2026-127274 First seen on SecPulse 08:30

Original description The description as published by the source.

A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code of the file /jnap/core/CheckAdminPassword. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed from remote. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Low 3.7; CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4: Low 2.9; CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Published: Nov 13, 2026
First seen on SecPulse: 08:30
GHSA: GHSA-fxg9-m7fm-rf7r
CWE: CWE-307 CWE-799

NVD GitHub Advisory

Tags(click for explanation)

All

CWE-307 CWE-799 Linksys Ea8100

Detection sources

NIST National Vulnerability Database09:20
GitHub Security Advisories (Global)09:32
CVE.org (CVE Program・cvelistV5)08:30