CVE-2026-108892
waiting for further signalsZero needs more public information before it can validate it.GHSA-cgfm-fxm5-56x9 ↗EUVD-2026-97449 ↗
description
Linksys E1700 firmware 1.0.0.4.003 has a stack-based buffer overflow in the MAC-filter management handler. A remote attacker may trigger the flaw when the affected web-management interface is reachable.
mitigation
Disable remote administration and restrict access to the router management interface to trusted administrative networks or hosts. Check for a supported vendor firmware update, and replace or retire the device if none is available.
outcome
Contextual: an exploit technique exists, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-12 13:30Zghsa: trigger signal, started the run
- 2026-10-12 13:30Zcve.org record for CVE-2026-108892
- 2026-10-12 16:29Zexploit reference (github.com)
this entry in the feed
GET /api/v1/feed/CVE-2026-108892
{ "etk_id": "ETK-2026-1380", "cve_id": "CVE-2026-108892", "display_id": "CVE-2026-108892", "ghsa_id": "GHSA-cgfm-fxm5-56x9", "euvd_id": "EUVD-2026-97449", "status": "published", "anchor_state": "anchored", "title": "Linksys E1700 MAC-filter stack buffer overflow", "summary": "Linksys E1700 firmware 1.0.0.4.003 has a stack-based buffer overflow in the MAC-filter management handler. A remote attacker may trigger the flaw when the affected web-management interface is reachable.", "mitigation": "Disable remote administration and restrict access to the router management interface to trusted administrative networks or hosts. Check for a supported vendor firmware update, and replace or retire the device if none is available.", "vendor": "Linksys", "product": "E1700", "affected": [ { "affected_notes": [], "affected_ranges": [ "1.0.0.4.003" ], "ecosystem": null, "fixed_versions": [], "package_name": "E1700", "purl": null } ], "cwes": null, "cvss_score": 10, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "epss_score": 0.0062, "epss_percentile": 0.4873, "epss_asof": "2026-10-20", "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 14.5224102, "t0_at": "2026-10-12T13:30:16.430000+00:00", "signals": { "public_poc": { "at": "2026-10-12T13:30:16.430000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-12T13:30:16.430000+00:00", "url": "https://github.com/wudipjq/my_vuln/blob/main/Linksys3/vuln_66/66.md" }, "trigger_signal": { "at": "2026-10-12T13:30:16.430000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-12T13:30:16.430000+00:00", "url": "https://github.com/advisories/GHSA-cgfm-fxm5-56x9" } } }
published 2026-10-12 16:17Z
last change 2026-10-21 13:29Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.