CVE-2026-108895

{
  "etk_id": "ETK-2026-1374",
  "cve_id": "CVE-2026-108895",
  "display_id": "CVE-2026-108895",
  "ghsa_id": "GHSA-v6gp-cmwg-49h5",
  "euvd_id": "EUVD-2026-97468",
  "status": "published",
  "anchor_state": "anchored",
  "title": "OS command injection in Linksys E1700 setDMZ",
  "summary": "Linksys E1700 firmware 1.0.0.4.003 is affected by OS command injection in the setDMZ handler. An attacker able to reach the affected management interface may be able to run commands on the device through the handler's MAC-address input.",
  "mitigation": "Restrict router management access to trusted administrative networks and block access to the management interface from untrusted networks. No fixed firmware version is recorded; monitor for and apply a vendor update if one becomes available.",
  "vendor": "Linksys",
  "product": "E1700",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "1.0.0.4.003"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "E1700",
      "purl": null
    }
  ],
  "cwes": [
    78
  ],
  "cvss_score": 9.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
  "epss_score": 0.022,
  "epss_percentile": 0.8229,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 40.58918813333333,
  "t0_at": "2026-10-12T14:15:10.292000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-12T14:15:10.292000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T14:15:10.292000+00:00",
      "url": "https://github.com/wudipjq/my_vuln/blob/main/Linksys3/vuln_69/69.md"
    },
    "trigger_signal": {
      "at": "2026-10-12T14:15:10.292000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-12T14:15:10.292000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-108895"
    }
  }
}