CVE-2026-127274 · Infrastructure
NO FIX YET
The Linksys EA8100 router firmware 1.0.3.216940 does not limit repeated authentication attempts on its admin password check endpoint, so an attacker can keep guessing passwords. A public exploit exists, but the sources say exploitation is difficult and the vendor did not respond.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Owners of Linksys EA8100 routers running firmware 1.0.3.216940, especially if remote administration or the web admin interface is reachable from the internet. The sources say the attack is hard to carry out and the vendor has not responded. Routers with remote management disabled and strong admin passwords are harder to reach.
Not affected if other-firmware, remote-management-off
Who cares ea8100, home-router, linksys
1.0.3.216940No fix yet, per the sources.
A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code of the file /jnap/core/CheckAdminPassword. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed from remote. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.