Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-114576: A vulnerability has been found in Linksys RE6250 1.0.04.001

26
Routine
LOW 3.7REMOTE

CVE-2026-114576 is a low-severity flaw (CVSS 3.7) affecting affected software. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.

Why this priority

  • Remotely exploitable, no login, no user action

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score3.7 (Low)
Attack vectorNetwork (remote)
Attack complexityHigh
Privileges neededNone
User interactionNone
EPSS exploit chance0.4% (top 66%)
CISA exploited listNo
WeaknessCWE-310, CWE-330
Published2026-10-22
Last modified2026-10-23
Publisher (CNA): VulDB

Timeline

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

References

← Back to latest CVEs