CVE-2026-108896: Linksys E1700 setLinksysIpv6 os command injection
A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument 6rdprefix/6rdprefixlen results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The attack can be launched remotely, but the assigned vector indicates low-privileged access is required. No user interaction is required.
Which inputs and endpoint are involved?
The affected function is setLinksysIpv6 at /goform/setLinksysIpv6. Command injection occurs through manipulation of the _6rd_prefix or _6rd_prefix_len arguments.
Is a public exploit available?
Yes. The exploit has been made public and could be used.
Is a vendor fix available?
The available information does not identify a fix. It states that the vendor was contacted early but did not respond.