Threats Tagged 'cve-2026-108896'
View all threats tagged with 'cve-2026-108896'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-108896'
Click on any threat for detailed analysis and mitigation recommendations
A critical command injection vulnerability exists in Linksys E1700 firmware version 1.0.0.4.003. The flaw is in the setLinksysIpv6 function, where manipulation of the _6rd_prefix or _6rd_prefix_len parameters allows remote attackers to execute arbitrary OS commands. The vulnerability has a high CVSS score of 9.9 and the exploit code has been publicly disclosed. The vendor has not responded to disclosure requests and no patch information is available. Join the discussion | GCVE Database | 10/12/2026, 15:32:23 UTC Added: 10/12/2026, 21:47:14 UTC |
0 CVE-2026-108896 is a critical OS command injection vulnerability in the Linksys E1700 router firmware version 1.0.0.4.003. The flaw exists in the setLinksysIpv6 function of the /goform/setLinksysIpv6 file, where manipulation of the _6rd_prefix or _6rd_prefix_len arguments allows remote attackers to execute arbitrary OS commands. The vulnerability can be exploited remotely without user interaction. Public exploit code is available, but no vendor response or patch has been provided. Join the discussion | CVE Database V5 | 10/12/2026, 14:30:14 UTC Added: 10/12/2026, 14:49:10 UTC |
Showing 1 to 2 of 2 results