A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values.
The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult.
The exploit has been disclosed to the public and may be used.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
None
No data modification
Availability
None
No disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 6
https://github.com/b1uerry/cves/blob/main/Linksys/RE6250/Linksys_RE6250_predict…
cna@vuldb.com
https://vuldb.com/cve/CVE-2026-114576
cna@vuldb.com
https://vuldb.com/submit/1021306
cna@vuldb.com
https://vuldb.com/vuln/424944
cna@vuldb.com
https://vuldb.com/vuln/424944/cti
cna@vuldb.com
https://www.linksys.com/
cna@vuldb.com