Linksys E5350 setup wizard missing authentication

Summary

The setup wizard of the Linksys E5350 router lets an attacker change settings without authentication. Remote attacks are possible, a public exploit exists, and the vendor did not respond.

What to do

Update these devices now!

• Linksys E5350

Products and platforms

• Linksys E5350

CVE IDs

• CVE-2026-121933 (opens in a new tab)

Sources

• Write-up: vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · vuldb.com (opens in a new tab) · github.com (opens in a new tab)
• CVE record: cve.org (opens in a new tab)

Times

First published 2026-11-04 19:15 UTC

First seen 2026-11-09 16:00 UTC