Linksys EA8100 vulnerable to unauthenticated remote management write access

A critical vulnerability in the Linksys EA8100 router (firmware 1.0.3.216940) allows an attacker to set the `isEnabled` flag in the JNAP API’s `SetUnsecuredWiFiWarning` function without authentication, effectively enabling an unsecured WiFi warning flag and potentially altering remote management settings. The flaw is exploitable over the network and could be used to bypass authentication checks. Linksys has not yet released a patch, so users should check for firmware updates and apply any available fixes. If no update is forthcoming, disabling remote management in the router’s settings is a prudent mitigation step. This issue highlights the need for regular firmware updates and careful configuration of remote management settings. Users should also review their network security posture and ensure that only trusted devices can access the router. Prompt action can prevent potential exploitation. NVD CVE‑2026‑127275