A vulnerability was determined in Linksys E1700 1.0.0.4.003. (CVE-2026-108892)

CVE-2026-108892 is a stack-based buffer overflow vulnerability in the ssid1MACFilter function of the Mac Filter component in Linksys E1700 firmware version 1.0.0.4.003. The vulnerability arises from improper handling of the argument newap_text_%d, allowing remote attackers to cause a buffer overflow. This can lead to full system compromise. The vulnerability has a CVSS 3.1 base score of 10.0 (critical) with network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability. The exploit has been publicly disclosed, but no vendor response or patch is available.

Successful exploitation allows remote attackers to execute arbitrary code or cause denial of service on the affected device, resulting in complete compromise of confidentiality, integrity, and availability of the device and potentially the network it protects.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should consider mitigating exposure by isolating the device from untrusted networks or disabling the vulnerable functionality if possible until a patch is available.