Vulnerabilities

A vulnerability was found in Linksys E1700 1.0.0.4.003.

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix/_6rd_prefix_len results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Linksys

CVSS

9.9

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-108896 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 30
   CVE NVD 20d ago

   A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003.

   PoC public CVSS 9.9 CVE-2026-108893 Linksys
2. 18
   CVE NVD 20d ago

   A vulnerability was determined in Linksys E1700 1.0.0.4.003.

   CVSS 10.0 CVE-2026-108892 Linksys