CVE-2026-127275 | Linksys EA8100 1.0.3.216940 JNAP API ui_server.lua SetRemoteSetting/SetUnsecuredWiFiWarning isEnabled/enabled missing authentication

November 12, 2026 Yanac

A vulnerability was found in Linksys EA8100 1.0.3.216940. It has been rated as very critical. This issue affects the function SetRemoteSetting/SetUnsecuredWiFiWarning of the file ui_server.lua of the component JNAP API. This manipulation of the argument isEnabled/enabled causes missing authentication.

The identification of this vulnerability is CVE-2026-127275. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More