CVE-2026-108894 Details
Description
A security flaw has been discovered in Linksys E1700 1.0.0.4.003. Impacted is the function addStaticRoute of the file /goform/addStaticRoute of the component Static Route Handler. Performing a manipulation of the argument staticRoute_IP_setting/staticRoute_Netmask_setting/staticRoute_Gateway_setting/staticRoute_Metric_setting results in os command injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
A command injection vulnerability has been identified in the Linksys E1700 router running firmware version 1.0.0.4.003. The issue arises in the Static Route Handler, specifically within the addStaticRoute function. Attackers can exploit this vulnerability remotely by manipulating the staticRoute_IP_setting, staticRoute_Netmask_setting, staticRoute_Gateway_setting, and staticRoute_Metric_setting parameters to execute arbitrary operating system commands. The vulnerability has been publicly disclosed, and a proof-of-concept exploit is available.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 12, 2026CISA-ADP
Assessed Oct 14, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/wudipjq/my_vuln/blob/main/Linksys3/vuln_68/68.md | [email protected] | ExploitTechnical Description |
| https://vuldb.com/cve/CVE-2026-108894 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/973113 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/416686 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/416686/cti | [email protected] | Content Wall |
| https://www.linksys.com/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-77 | Improper Neutralization of Special Elements used in a Command ('Command Injection') | [email protected] |
| CWE-78 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Linksys E1700 | E1700(1.0.0.4.003) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 14, 2026 | CVE Modified | CISA-ADP |
| Oct 12, 2026 | New CVE Received | [email protected] |