PatchTheCVECVE-2026-4149: Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability
CVE-2026-4149 is a critical-severity flaw (CVSS 9.8) affecting era 300 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the DataOffset field within SMB responses. The issue results from the lack of proper validation of user-supplied data, which can result in a
Why this priority
- Critical severity
- CISA SSVC: automatable with total technical impact
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 9.8 (Critical) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 1.0% (top 38%) |
| CISA exploited list | No |
| Weakness | CWE-119 |
| Published | 2026-04-11 |
| Last modified | 2026-10-26 |
Last updated 2026-10-26 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Exact fixes by distribution
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-4149?
era 300 firmware: upgrade to 83.1-61240. Exact commands for each OS are on this page.
Is CVE-2026-4149 being exploited?
CVE-2026-4149 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-4149 affect?
CVE-2026-4149 affects era 300 firmware. Severity is critical (CVSS 9.8). Sonos Era 300 SMB Response Out-Of-Bounds Access Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sonos Era 300. Authentication is not required to exploit
How urgent is CVE-2026-4149?
Priority 58/100. Critical severity; CISA SSVC: automatable with total technical impact; Remotely exploitable, no login, no user action