Stack-based Buffer Overflow Vulnerability in Linksys E8450 Router

CVE-2026-120283

What is CVE-2026-120283?

A stack-based buffer overflow vulnerability exists in the Linksys E8450 router impacting the strcpy function within the /www/cgi-bin/portal.cgi file. By manipulating the 'hidden_timezone' argument, remote attackers can exploit this flaw to execute arbitrary code on the affected device. This vulnerability poses a significant risk as it can be triggered without user interaction. The vendor has been notified regarding the disclosure but has not provided any response, highlighting an important concern for users relying on the security of their networking devices.

References