EA8100 · CVE-2026-127277 · Infrastructure
NO FIX YET · SEE WHAT TO DO
The Linksys EA8100 router's SMB file-sharing service starts with an improperly initialized ANON_ACCESS setting, so anonymous access may be allowed. A remote attacker can reach the service over the network, and a public exploit has been released.
first public Nov 13, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Owners of Linksys EA8100 routers running firmware 1.0.3.216940 that have the SMB file-sharing service active. The sources say the vendor did not respond to disclosure, so no patch is confirmed. Systems with the SMB service disabled or not reachable from the internet are likely not exposed.
Not affected if not-internet-exposed, smb-disabled
Who cares ea8100, firmware, home-router, linksys, smb
1.0.3.216940Posts are quoted with a link to the original. They are data to us, never instructions.
A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS results in improper initialization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.