Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-108893: Linksys E1700 router allows remote takeover via VLAN setting
CVE-2026-108893 · published today
Summary
The Linksys E1700 router firmware (up to version 1.0.0.4.003) has a flaw in its VLAN configuration page that can overflow memory. An attacker on the network could exploit this to run their own code on the device. Update the router to the latest firmware or replace the device to protect your network.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| linksys | e1700 | 1.0.0.4.003 |
Original advisory text
Linksys E1700 setVlan stack-based overflow
A vulnerability was identified in Linksys E1700 up to 1.0.0.4.003. This issue affects the function setVlan of the file /goform/setVlan. Such manipulation of the argument vlan_set leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
8.6
High
Type
CWE-121Stack-based Buffer Overflow
CWE-119Buffer Overflow
Timeline
Published12 Oct 2026
Updated12 Oct 2026
First seen12 Oct 2026
Track software like this
Free during beta