A critical OS command injection flaw in the setDMZ function of Linksys E1700 firmware 1.0.0.4.003 can be exploited remotely, a public exploit is available, and the vendor has not responded to the disclosure.
What Is It
CVE-2026-108895 is an OS command injection vulnerability (CWE-77, CWE-78) in the Linksys E1700 router. The flaw is in the setDMZ function of the /goform/setDMZ endpoint. An attacker who manipulates the MAC_addr argument can inject operating system commands. VulDB is the CNA, and it published the CVE on 2026-10-12. NVD currently lists the record's status as "Received."
Why It Matters
The CNA gives the flaw a CVSS 3.1 base score of 9.9 (CRITICAL), with the vector AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. That means:
- Network-reachable: the attack can be launched remotely.
- Low complexity: it needs only low privileges and no user interaction.
- Scope changed: impact goes beyond the vulnerable component, with high impact to confidentiality, integrity and availability.
Under CVSS 4.0 the score is 8.6 (HIGH), with exploit maturity rated Proof-of-Concept. The CVE description says the exploit "has been made available to the public and could be used for attacks."
The supplied CISA KEV entry is empty. CVE-2026-108895 is not currently listed in the KEV catalog, so CISA has not confirmed active exploitation. Because a public exploit exists, defenders should still treat it as a priority.
What's Vulnerable
- Vendor: Linksys
- Product: E1700
- Affected version: firmware 1.0.0.4.003
- CPE:
cpe:2.3:o:linksys:e1700_firmware:*:*:*:*:*:*:*:* - Affected component:
/goform/setDMZ,setDMZfunction,MAC_addrparameter
Patch Status
No patch is referenced. According to the disclosure, the reporter contacted Linksys early, but "did not respond in any way." The supplied sources contain no vendor advisory, fixed firmware version or official workaround. Because there is no KEV entry, no CISA required action or due date applies.
Until Linksys provides guidance, owners of affected E1700 devices should limit who can reach the router's management interface and keep checking Linksys for updates.