Is CVE-2026-108892 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-108892 being exploited in the wild.

How severe is CVE-2026-108892?

Critical severity, with a CVSS score of 10, published 12 October 2026.

Is there a fix for CVE-2026-108892?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-108892 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-108892?

Check whether you run Linksys E1700 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-108892: Linksys E1700 stack buffer overflow in MAC filter

CVE-2026-108892 · Severity: critical · CVSS 10 · Published 2026-10-12

The Linksys E1700 router contains a stack buffer overflow in its MAC address filtering feature that allows a remote attacker to crash the device by sending a specially crafted HTTP request. An attacker exploiting this vulnerability can cause the router to stop functioning, disrupting network connectivity for all connected devices until the router is rebooted.

Technologies: Linksys E1700. Vendors: Linksys.

Quick answers

Is CVE-2026-108892 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-108892 being exploited in the wild.
How severe is CVE-2026-108892?: Critical severity, with a CVSS score of 10, published 12 October 2026.
Which products and versions are affected?: Linksys E1700 1.0.0.4.003.
Is there a fix for CVE-2026-108892?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-108892 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-108892?: Check whether you run Linksys E1700 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stack-based buffer overflow exists in the ssid1MACFilter function of the mod_form.so binary when processing the newap_text_%d parameter without proper input validation. The vulnerability is remotely exploitable via an HTTP POST request to /goform/ssid1MACFilter; no authentication is required. An attacker can control program execution or cause denial of service by overflowing the stack with excess data.

Affected products

Linksys E1700 1.0.0.4.003

Timeline

2026-10-12: disclosed: Publicly disclosed vulnerability

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.