CVE-2026-114576: Linksys RE6250 Web Management strcmp random values
A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument sessionid leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.
Event History
Frequently Asked Questions
Does exploitation require credentials or user interaction?
No authentication privileges or user interaction are required according to the supplied vector. The attack can be initiated remotely, although it has high attack complexity.
What is the expected impact if exploitation succeeds?
The supplied vector indicates low confidentiality impact and no integrity or availability impact.
Is exploit code publicly available?
Yes. The provided data states that the exploit has been publicly disclosed and may be used, while also characterizing exploitation as difficult.