---
id: "CVE-2026-127274"
page: "https://infrastack.ai/live/CVE-2026-127274"
kind: "vulnerability"
aliases: ["CVE-2026-127274"]
title: "Linksys EA8100 router: admin password checks lack attempt limits"
severity: "low"
cvss: 3.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ea8100", "home-router", "infrastructure", "linksys"]
not_affected_if: ["other-firmware", "remote-management-off"]
published_at: "2026-11-13T00:20:13+00:00"
first_seen_at: "2026-11-13T00:41:07+00:00"
updated_at: "2026-11-13T00:41:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-127274", "first_seen_at": "2026-11-13T00:41:07+00:00"}]
exploit_sources: []
---

# Linksys EA8100 router: admin password checks lack attempt limits

Link for people: https://infrastack.ai/live/CVE-2026-127274 (this .md is for agents)

The Linksys EA8100 router firmware 1.0.3.216940 does not limit repeated authentication attempts on its admin password check endpoint, so an attacker can keep guessing passwords. A public exploit exists, but the sources say exploitation is difficult and the vendor did not respond.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the router's firmware version in the Linksys app or admin page and compare it to `1.0.3.216940`

## Timeline

- 2026-11-13T00:41:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-127274

## From the sources

A vulnerability was found in Linksys EA8100 1.0.3.216940. This vulnerability affects unknown code of the file /jnap/core/CheckAdminPassword. The manipulation results in improper restriction of excessive authentication attempts. The attack may be performed from remote. The attack requires a high level of complexity. It is stated that the exploitability is difficult. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_