CVE-2026-121933
Deferred Deferred - Pending Action

Authentication Bypass in Linksys E5350 Setup Wizard

Publication date: 2026-11-04

Last updated on: 2026-11-04

Assigner: VulDB

Description
A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi of the component Setup Wizard. Executing a manipulation of the argument wizard_router_pwd can lead to missing authentication. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-04
Last Modified
2026-11-04
Generated
2026-11-04
AI Q&A
2026-11-04
EPSS Evaluated
N/A
NVD
CVE-2026-121933
EUVD
EUVD-2026-117035

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Linksys E5350 1.0.00.037

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-287 When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linksys E5350 router version 1.0.00.037. It involves a flaw in the Setup Wizard's save_settings function located in /wizard/apply.cgi. An attacker can manipulate the 'wizard_router_pwd' argument to bypass authentication, allowing remote access without valid credentials. The exploit has been publicly disclosed and may already be in use.

Detection Guidance

Detecting this vulnerability requires checking for the Linksys E5350 device on your network and verifying its firmware version. Use network scanning tools like nmap to identify devices running the vulnerable firmware (1.0.00.037). Check the device's web interface at http://<device-ip>/wizard/apply.cgi for the presence of the setup wizard. If the device is accessible without authentication, it may be vulnerable.

Impact Analysis

This vulnerability allows remote attackers to gain full control of the affected Linksys E5350 router without authentication. They could change settings, intercept network traffic, install malware, or use the device as part of a botnet. Since the exploit is public, unpatched devices are at immediate risk.

Mitigation Strategies

Immediately isolate the affected Linksys E5350 device from your network to prevent remote exploitation. Disable remote access to the device's web interface if enabled. Contact Linksys support for a firmware update or patch. If no patch is available, consider replacing the device with a supported model. Monitor network traffic for unusual activity targeting the device.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-121933. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...