CVE-2026-108892: Stack-based Buffer Overflow in Linksys E1700

This vulnerability in Linksys E1700 version 1.0.0.4.003 involves a stack-based buffer overflow in the ssid1MACFilter function of the Mac Filter component, specifically in the /goform/ssid1MACFilter endpoint. The flaw is triggered by crafted input to the newap_text_%d argument, allowing remote attackers to cause a buffer overflow. The vulnerability has a CVSS 4.0 base score of 10.0, indicating critical severity with network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Public exploit code has been disclosed. The vendor was contacted but did not respond or provide a patch.

Successful exploitation can lead to arbitrary code execution or denial of service on the affected device. The vulnerability is remotely exploitable without authentication, posing a critical risk to device security and network integrity. The public availability of exploit code increases the likelihood of attacks.

No official patch or remediation is currently available from the vendor. Users should consider disabling the vulnerable functionality if possible or isolating the device from untrusted networks. Monitor vendor channels for any future updates or advisories. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.