CVE-2026-114576 Details
Description
A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.
A vulnerability exists in the Linksys RE6250 Wi-Fi Range Extender, specifically in the web management interface of firmware version 1.0.04.001. The issue arises from the session ID for the administrator being generated using a non-cryptographic pseudo-random number generator (PRNG) that is seeded only with the current time, leading to predictable session IDs. This vulnerability allows an unauthenticated attacker to hijack an active admin session by calculating the session ID offline, once the login time is known.
To address this vulnerability, it is recommended to use a cryptographically secure random number generator for session ID creation, bind session IDs to the client's source address, and validate them on each request. Additionally, only a hash of the session ID should be stored server-side, and sessions should not be created on failed authentication attempts.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 22, 2026CISA-ADP
Assessed Oct 23, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/b1uerry/cves/blob/main/Linksys/RE6250/Linksys_RE6250_predictable_sessionId/details.md | [email protected] | ExploitRemedyTechnical Analysis |
| https://vuldb.com/cve/CVE-2026-114576 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1021306 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/424944 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/424944/cti | [email protected] | Content Wall |
| https://www.linksys.com/ | [email protected] | Vendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-310 | Cryptographic Issues | [email protected] |
| CWE-330 | Use of Insufficiently Random Values | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| Linksys RE6250 | 1.0.04.001 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 23, 2026 | CVE Modified | CISA-ADP |
| Oct 22, 2026 | New CVE Received | [email protected] |