Low 3.7

A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of...

CVE-2026-127276 First seen on SecPulse 09:15

Original description The description as published by the source.

A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of the component Web UI. Such manipulation leads to cookie without 'httponly' flag. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Low 3.7; CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4: Low 2.9; CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Published: Nov 13, 2026
First seen on SecPulse: 09:15
GHSA: GHSA-gwfv-r9h8-x85p
CWE: CWE-732 CWE-1004

NVD GitHub Advisory

Tags(click for explanation)

All

CWE-1004 Linksys Ea8100

CWE

CWE-732

Detection sources

NIST National Vulnerability Database11:18
GitHub Security Advisories (Global)12:32
CVE.org (CVE Program・cvelistV5)09:15