CVE-2026-114576 Linksys RE6250 Web Management strcmp random values
- Exploited in the wild
- Not known
- Fix
- None listed
What is CVE-2026-114576?
CVE-2026-114576 is a medium-severity vulnerability in Linksys RE6250, published on 22 Oct 2026.
Official description
A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.
Which versions are affected by CVE-2026-114576?
How do I fix CVE-2026-114576?
No fix has been published for CVE-2026-114576 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-114576 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-114576 exists.
Sources
Also known as GHSA-w2w5-phf3-47jv.