Critical 10.0

A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an...

CVE-2026-127277 First seen on SecPulse 09:30

Original description The description as published by the source.

A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS results in improper initialization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory

References

Key facts

CVSS v3: Critical 10.0; CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4: Critical 9.3; CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Published: Nov 13, 2026
First seen on SecPulse: 09:30
GHSA: GHSA-vp98-45w4-xm4m
CWE: CWE-665

NVD GitHub Advisory

Tags(click for explanation)

CWE

CWE-665

All

Linksys Ea8100

Detection sources

NIST National Vulnerability Database11:18
GitHub Security Advisories (Global)12:32
CVE.org (CVE Program・cvelistV5)09:30