CVE-2026-108893: Stack-based Buffer Overflow in Linksys E1700

This vulnerability affects Linksys E1700 routers running firmware version 1.0.0.4.003. The issue is a stack-based buffer overflow in the setVlan function within the /goform/setVlan endpoint. By manipulating the vlan_set argument, an attacker can overflow the stack, potentially leading to remote code execution or denial of service. The vulnerability can be exploited remotely without user interaction. Public exploit code exists, but there is no vendor response or patch available at this time.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to execute arbitrary code on the affected device or cause a denial of service. Given the critical CVSS score of 9.4 and the presence of public exploit code, the risk to affected devices is high. The lack of vendor response and patch increases exposure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a patch is available, network administrators should consider isolating affected devices from untrusted networks and monitoring for suspicious activity targeting the /goform/setVlan endpoint. No official fix or temporary workaround has been provided by the vendor.