---
id: "CVE-2026-127276"
page: "https://infrastack.ai/live/CVE-2026-127276"
kind: "vulnerability"
aliases: ["CVE-2026-127276"]
title: "Linksys EA8100 router: web admin cookie missing HttpOnly flag"
severity: "low"
cvss: 3.7
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ea8100", "home-router", "infrastructure", "linksys", "web-ui"]
not_affected_if: ["admin-not-exposed", "different-firmware"]
published_at: "2026-11-13T02:18:54+00:00"
first_seen_at: "2026-11-13T02:41:36+00:00"
updated_at: "2026-11-13T02:43:05+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-127276", "first_seen_at": "2026-11-13T02:41:36+00:00"}]
exploit_sources: []
---

# Linksys EA8100 router: web admin cookie missing HttpOnly flag

Link for people: https://infrastack.ai/live/CVE-2026-127276 (this .md is for agents)

The Web UI of the Linksys EA8100 router sets a session cookie without the HttpOnly flag, so scripts in the browser can read it. An attacker who can get script running in a logged-in admin's browser could steal the cookie and reuse the session.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Log in to the router's web admin page and inspect the Set-Cookie header for the session cookie in browser developer tools; look for a missing `HttpOnly` attribute.
- Check the firmware version under the router's settings and compare it with `1.0.3.216940`.

## Timeline

- 2026-11-13T02:41:36+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-127276

## From the sources

A vulnerability was identified in Linksys EA8100 1.0.3.216940. Impacted is an unknown function of the component Web UI. Such manipulation leads to cookie without 'httponly' flag. It is possible to launch the attack remotely. This attack is characterized by high complexity. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_