← CVE Radar
CVE-2026-127275Linksys EA8100 JNAP API ui_server.lua SetUnsecuredWiFiWarning missing authentication
A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument isEnabled/enabled causes missing authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
10.0 CRITICALEPSS 0.75%Not in KEVNVD: Deferred
Overview
Severity
| Score | Severity | Version | Technologies Affected |
|---|---|---|---|
| 10.0 | CRITICAL | 4.0VulDB (CNA) | |
| 9.3 | CRITICAL | 4.0VulDB (CNA) | |
| 10.0 | CRITICAL | 3.1VulDB (CNA) | |
| 10.0 | CRITICAL | 3.1VulDB (CNA) | |
| 10.0 | CRITICAL | 3.0VulDB (CNA) | |
| 10.0 | HIGH | 2.0VulDB (CNA) | |
| 10.0 | HIGH | 2.0VulDB (CNA) |
Details
- CVE ID
- CVE-2026-127275
- Status
- Deferred
- Assigner (CNA)
- VulDB
- Published
- Nov 13, 2026
- Last modified
- 2026-11-13 23:17 UTC
Affected Products
As published by the CNA in the CVE record.
LinksysEA81001 version range
- 1.0.3.216940
References
- github.com https://github.com/geo-chen/oss/blob/main/Linksys.md#finding-3-unauthenticated-write-access-to-remote-management-pairing-state-and-unsecured-wifi-warning-flag
- vuldb.com https://vuldb.com/cve/CVE-2026-127275
- vuldb.com https://vuldb.com/submit/1040997
- vuldb.com https://vuldb.com/vuln/436430
- vuldb.com https://vuldb.com/vuln/436430/cti
- linksys.com https://www.linksys.com/