{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/e5350/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:o:linksys:e5350_firmware:1.0.00.037:*:*:*:*:*:*:*","cpe:2.3:a:linksys:e5350:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-121933"},{"cvss":10,"id":"CVE-2026-121932"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-121933\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["Linksys Router (unspecified version)","E5350 (1.0.00.037)","E5350"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","network-security"],"_cs_type":"advisory","_cs_vendors":["Linksys"],"content_html":"\u003cp\u003eCVE-2026-121933 affects the Linksys E5350 router firmware version 1.0.00.037. The vulnerability resides in the Setup Wizard component, specifically within the \u003ccode\u003esave_settings\u003c/code\u003e function of the \u003ccode\u003e/wizard/apply.cgi\u003c/code\u003e script. Attackers can bypass authentication mechanisms by manipulating the \u003ccode\u003ewizard_router_pwd\u003c/code\u003e argument. Publicly available exploit code exists for this vulnerability, and the vendor has not provided a response or a patch to date.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability allows remote, unauthenticated attackers to gain unauthorized access or modify router settings. Given the nature of the authentication bypass, this could lead to full device compromise or administrative control.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately restrict management interface access to the Linksys E5350 to trusted, internal IP ranges only.\u003c/li\u003e\n\u003cli\u003eDisable the Setup Wizard functionality if the device is already provisioned and in use.\u003c/li\u003e\n\u003cli\u003eMonitor network traffic for HTTP requests targeting \u003ccode\u003e/wizard/apply.cgi\u003c/code\u003e from untrusted or external source IPs.\u003c/li\u003e\n\u003cli\u003eBecause no patch is available, consider isolating vulnerable devices from the public internet using an upstream firewall or ACL.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-05T00:21:55Z","date_published":"2026-11-02T15:29:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-linksys-router-auth-bypass/","summary":"A critical authentication bypass vulnerability in the Linksys E5350 router allows remote, unauthenticated attackers to manipulate the wizard_router_pwd parameter via the /wizard/apply.cgi endpoint.","title":"Linksys E5350: Authentication bypass in Setup Wizard (CVE-2026-121933)","url":"https://feed.craftedsignal.io/briefs/2026-11-linksys-router-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - E5350","version":"https://jsonfeed.org/version/1.1"}