CRITICAL 9.3 NVD
CVE-2026-121933
A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi of the component Setup Wizard. Executin
A flaw has been found in Linksys E5350 1.0.00.037. This impacts the function save_settings of the file /wizard/apply.cgi of the component Setup Wizard. Executing a manipulation of the argument wizard_router_pwd can lead to missing authentication. The attack may be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References
- https://github.com/Zimo-666/E5350-cves/tree/main/02-empty-admin-password-auth-bypass
- https://vuldb.com/cve/CVE-2026-121933
- https://vuldb.com/submit/1024276
- https://vuldb.com/vuln/431045
- https://vuldb.com/vuln/431045/cti
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-11-04 via NVD.
Risk Timeline
CVE Disclosed2026-11-04 · 0 days ago
Remediation Resources
Official Advisory
vuldb.com/cve/CVE-2026-121933Official Advisory
vuldb.com/vuln/431045Analysis & PoC
vuldb.com/submit/1024276
vulnfeed aggregates 16578 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.