CVE-2026-121615
Improper Authentication in Linksys E5600 1.1.0.26
- CVSS 4.0
- 9.3 critical
- EPSS
- —
- Published
- ·
- Modified
The Login Handler in Linksys E5600 version 1.1.0.26 mishandles /cgi-bin/mesh_login.cgi allowing remote unauthenticated manipulation to bypass authentication. An attacker can fully compromise the device.
What to do: No update available as the product is no longer supported by the maintainer; replace the device.
| Product | Affected |
|---|---|
| Linksys E5600 | 1.1.0.26 |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
A vulnerability was determined in Linksys E5600 1.1.0.26. Affected is an unknown function of the file /cgi-bin/mesh_login.cgi of the component Login Handler. Executing a manipulation can lead to improper authentication. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.
- Weakness
- CWE-287
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news
0 storiesNo ingested article mentions this CVE yet.