CVE-2026-127274mediumCWE-307CWE-799

CVE-2026-127274: medium-severity vulnerability in Linksys EA8100

Linksys EA8100 CheckAdminPassword excessive authentication

Published

Follow this CVE+ Monitor EA8100

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3
A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code of the file /jnap/core/CheckAdminPassword. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed from remote. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
Linksys · EA8100
Related CVEs — Linksys EA8100

In the same product, most dangerous first.

CVE-2026-127277CRITICALLinksys EA8100 SMB Service service_smbd.sh initializationEPSS —CVE-2026-127276MEDIUMLinksys EA8100 Web UI cookie httponly flagEPSS —CVE-2026-127275CRITICALLinksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authenticationEPSS —CVE-2026-127273MEDIUMLinksys EA8100 JNAP API IsAdminPasswordDefault missing authenticationEPSS —