CVE-2026-127275criticalCWE-287CWE-306

CVE-2026-127275: critical vulnerability in Linksys EA8100

Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication

Published

Follow this CVE+ Monitor EA8100

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

25Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 10
A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument isEnabled/enabled causes missing authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Affected products
Linksys · EA8100
Related CVEs — Linksys EA8100

In the same product, most dangerous first.

CVE-2026-127277CRITICALLinksys EA8100 SMB Service service_smbd.sh initializationEPSS —CVE-2026-127276MEDIUMLinksys EA8100 Web UI cookie httponly flagEPSS —CVE-2026-127274MEDIUMLinksys EA8100 CheckAdminPassword excessive authenticationEPSS —CVE-2026-127273MEDIUMLinksys EA8100 JNAP API IsAdminPasswordDefault missing authenticationEPSS —