CVE-2026-127277 PUBLISHED

Linksys EA8100 SMB Service service_smbd.sh initialization

Assigner: VulDB
Reserved: 12.11.2026 Published: 13.11.2026 Updated: 13.11.2026

A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS results in improper initialization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
CVSS Score: 10

Product Status

Vendor Linksys
Product EA8100
Versions
  • Version 1.0.3.216940 is affected

Credits

  • geochen (VulDB User) reporter
  • VulDB CNA Team coordinator

References

Problem Types

  • Improper Initialization CWE