CVE-2026-108892
10 CRITICALpublic exploit availablePublished 2026-10-12 · Updated 2026-10-15
AI risk analysis
- Summary
- A stack-based buffer overflow exists in Linksys E1700's MAC filter functionality that allows remote attackers to execute arbitrary code with high privileges, potentially leading to complete device compromise and network infiltration.
- Exploitability
- The vulnerability is highly exploitable with no authentication required, allowing remote exploitation through crafted input to the ssid1MACFilter function with minimal preconditions.
- Blast radius
- If exploited, this flaw could enable attackers to gain full control over affected Linksys E1700 routers, potentially allowing them to pivot into the internal network and compromise connected devices.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to firmware version 2.590 or later to remediate this buffer overflow vulnerability.
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function ssid1MACFilter of the file /goform/ssid1MACFilter of the component Mac Filter. This manipulation of the argument newap_text_%d causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-119, CWE-121
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-100908PoC
- CRITICALCVE-2026-101038PoC
- CRITICALCVE-2026-108893PoC
- CRITICALCVE-2026-109109PoC
- CRITICALCVE-2017-20242
- CRITICALCVE-2026-108915PoC
- CRITICALCVE-2026-49435
- CRITICALCVE-2026-76721
Related by shared AI tags and CWE weakness class. Browse the full archive.