CVE-2026-108896
Received Received - Intake

Command Injection in Linksys E1700 Router Firmware

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulDB

Description
A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix/_6rd_prefix_len results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-108896
EUVD
EUVD-2026-97470

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Linksys E1700 1.0.0.4.003

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-108896 is a Remote Command Execution (RCE) flaw in Linksys E1700 routers. The vulnerability exists in the setLinksysIpv6 function, where attacker-controlled inputs _6rd_prefix and _6rd_prefix_len are passed without validation. This allows command injection via the ipv6cmd binary. An attacker can send a POST request to /goform/setLinksysIpv6 with malicious input to execute arbitrary commands on the router.

Detection Guidance

Check if your Linksys E1700 router is running firmware version 1.0.0.4.003. Monitor network traffic for POST requests to /goform/setLinksysIpv6 with unusual parameters like _6rd_prefix or _6rd_prefix_len containing shell commands. Use tools like Wireshark to inspect HTTP POST requests targeting this endpoint.

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary commands on the router. An attacker could gain unauthorized access, install malware, steal data, or use the router as a pivot point to attack other devices on the network. The exploit could also enable persistent access or denial-of-service attacks.

Compliance Impact

This vulnerability allows remote command execution on the router, potentially enabling unauthorized access to network traffic and sensitive data. For GDPR, it could lead to unauthorized data processing or breaches. For HIPAA, it may expose protected health information if the router is used in healthcare environments. Compliance violations could occur due to insufficient security controls.

Mitigation Strategies

Immediately update the router firmware to the latest version if available. Disable remote administration features if not needed. Block external access to the /goform/setLinksysIpv6 endpoint via firewall rules. Monitor for unauthorized access attempts or unusual network activity.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-108896. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart