---
id: "CVE-2026-127277"
page: "https://infrastack.ai/live/CVE-2026-127277"
kind: "vulnerability"
aliases: ["CVE-2026-127277"]
title: "Linksys EA8100 router: SMB service misconfiguration lets remote attackers in"
severity: "critical"
cvss: 10.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "EA8100", "fixed": [], "affected": "1.0.3.216940", "ecosystem": "vendor"}]
ecosystems: []
tags: ["ea8100", "firmware", "home-router", "infrastructure", "linksys", "smb"]
not_affected_if: ["not-internet-exposed", "smb-disabled"]
published_at: "2026-11-13T02:18:54+00:00"
first_seen_at: "2026-11-13T02:41:36+00:00"
updated_at: "2026-11-13T02:44:09+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-127277", "first_seen_at": "2026-11-13T02:41:36+00:00"}, {"source": "analyst", "url": "https://vuldb.com/vuln/436432", "first_seen_at": "2026-11-13T02:44:09+00:00", "cites": ["https://vuldb.com/vuln/436432"]}]
exploit_sources: []
---

# Linksys EA8100 router: SMB service misconfiguration lets remote attackers in

Link for people: https://infrastack.ai/live/CVE-2026-127277 (this .md is for agents)

The Linksys EA8100 router's SMB file-sharing service starts with an improperly initialized ANON_ACCESS setting, so anonymous access may be allowed. A remote attacker can reach the service over the network, and a public exploit has been released.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:EA8100 affected 1.0.3.216940 fixed no fixed version listed

## How to check

- Admin page > firmware version: only 1.0.3.216940 is named as affected by the CNA (other versions are untested, not ruled out).
- Check whether file sharing/SMB (USB storage sharing) is enabled and whether anonymous access is allowed; see if TCP 445/139 is reachable from the internet or from untrusted LAN/guest clients.

## Fix

No fix known: VulDB reports the vendor did not respond and lists no countermeasure. Check Linksys EA8100 support downloads for newer firmware than 1.0.3.216940. Until then, disable SMB file sharing and do not expose it to the internet; VulDB suggests replacing the device.

## Timeline

- 2026-11-13T02:41:36+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-127277
- 2026-11-13T02:44:09+00:00 analyst https://vuldb.com/vuln/436432 — Only VulDB (CNA) and NVD found; no Linksys advisory or firmware fix located, vendor reportedly did not respond. VulDB says PoC public (GitHub, link not visible), no auth needed, no countermeasure known. Default-on state of SMB and what anonymous access exposes are not stated by any source. Nothing verified.

## Documents

- [describes] VulDB VDB-436432: Linksys EA8100 SMB ANON_ACCESS initialization https://vuldb.com/vuln/436432

## From the sources

A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS results in improper initialization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_