CVE-2026-120283
CRITICAL
NVD
CVSS Score
10
Severity
CRITICAL
Published
Nov 02, 2026
Vendor
unknown
Description
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.