---
id: "CVE-2026-114576"
kind: "vulnerability"
aliases: ["CVE-2026-114576"]
title: "Linksys RE6250 range extender: weak web session IDs allow session guessing"
severity: "low"
cvss: 3.7
epss: 0.0041
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["home-network", "infrastructure", "linksys", "re6250", "router"]
not_affected_if: ["admin-interface-not-reachable", "other-firmware"]
published_at: "2026-10-22T02:16:55+00:00"
first_seen_at: "2026-10-23T21:57:30+00:00"
updated_at: "2026-10-25T04:43:30+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114576", "first_seen_at": "2026-10-23T21:57:30+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-114576", "first_seen_at": "2026-10-24T07:15:52+00:00"}]
---

# Linksys RE6250 range extender: weak web session IDs allow session guessing

The web management interface of the Linksys RE6250 range extender (firmware 1.0.04.001) generates session_id values that are not random enough. A remote attacker who predicts a valid session ID could potentially take over an administrative session.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the firmware version in the device admin page or the Linksys app; affected version is `1.0.04.001`
- unknown

## Fix

- unknown

## Timeline

- 2026-10-23T21:57:30+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114576
- 2026-10-24T07:15:52+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-114576

## From the sources

A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_