CVE catalog
All CVEs

CVE-2026-127275

Linksys EA8100 unauthenticated Wi-Fi warning change in JNAP API

critical · 10.0

Linksys EA8100

Published

Description

A vulnerability was determined in Linksys EA8100 1.0.3.216940. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument isEnabled/enabled causes missing authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

Data from cve.now. Summaries, where shown, are licensed CC BY 4.0.