CRITICALCVSS v3.1 10.0Vulnerability

CVE-2026-127277

A security flaw has been discovered in Linksys EA8100 1.0.3.216940. The affected element is an unknown function of the file etc/init.d/service_smbd.sh of the component SMB Service. Performing a manipulation of the argument ANON_ACCESS results in improper initialization. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Properties

Epss score
0.00561
Cvss score
10
First seen
2026-11-13T00:30:22+00:00
Last seen
2026-11-13T00:30:22+00:00
Euvd assigner
VulDB
Retrieved at
2026-11-14T00:51:03+00:00
Src batch id
euvd-20261113T013402Z-ef99bd
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-124793
Score
10
Euvd base score version
4.0
Fetched at
2026-11-13T01:34:21+00:00
Euvd vendor
Linksys
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
First seen by Signal
2026-11-13T01:34:22+00:00
Euvd base score
10
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Content hash
d2e0a18afdedb9c6a77140e9248c87e6a5ecb6a420aa98455a995a2f54874418
Published at
2026-11-13T02:18:54.520
Last modified
2026-11-13T02:18:54.667
Euvd updated
2026-11-13T00:30:22+00:00

Related Entities (1)

HAS_WEAKNESS (1)

Related research

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-127277 (CVSS v3.1 10) — Ninja Signal Threat Intelligence | Ninja Signal