Improper Authentication Handling in Linksys EA8100 Router

CVE-2026-127274

What is CVE-2026-127274?

A significant vulnerability exists in the Linksys EA8100 Router that allows an attacker to bypass authentication restrictions due to improper handling of excessive login attempts. The flaw is located in the /jnap/core/CheckAdminPassword file, where the system fails to appropriately limit the number of authentication tries. This vulnerability can potentially allow unauthorized access to the router from a remote location, posing a risk of exploitation. Although the complexity of the attack may be high, the lack of response from the vendor upon disclosure raises concern about user security. As the details of the exploit have been made public, affected users are advised to take necessary precautions.

References