Description
A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.
Published: 2026-10-22
Score: 6.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Remote session hijacking via predictable session identifiers
Action: Apply Patch
AI Analysis

Impact

The flaw originates in the Web Management Interface’s use of the strcmp function, where an attacker can manipulate the session_id argument to generate insufficiently random values. This weakness, classified as CWE‑310 and CWE‑330, permits a remote attacker—though the attack demands high complexity—to predict or reuse session tokens, thereby gaining unauthorized access to the router’s configuration interface.

Affected Systems

Linksys RE6250 routers running firmware version 1.0.04.001 are affected. The issue is confined to the web management component and does not compromise other services exposed by the device.

Risk and Exploitability

The CVSS score of 6.3 indicates moderate severity. EPSS data is unavailable, and the vulnerability is not listed in CISA’s KEV catalog, but it has been publicly disclosed and can be exploited remotely when the web management interface is reachable. Successful exploitation requires the attacker to discover the interface, tamper with session_id values, and successfully predict or reuse a session identifier to perform unauthorized operations.

Generated by OpenCVE AI on October 22, 2026 at 05:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update the router firmware to a version that includes a fix for the session_id randomness issue.
  • If an immediate firmware update is not feasible, disable remote access to the Web Management Interface or limit it to local network usage.
  • Continuously monitor device logs for anomalous authentication attempts or session token reuse and enforce strong password policies to mitigate potential compromise.

Generated by OpenCVE AI on October 22, 2026 at 05:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 23 Oct 2026 22:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 22 Oct 2026 04:30:00 +0000

Type Values Removed Values Added
First Time appeared Linksys re6250
Vendors & Products Linksys re6250

Thu, 22 Oct 2026 01:45:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in Linksys RE6250 1.0.04.001. This affects the function strcmp of the component Web Management Interface. The manipulation of the argument session_id leads to insufficiently random values. The attack may be initiated remotely. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been disclosed to the public and may be used.
Title Linksys RE6250 Web Management strcmp random values
First Time appeared Linksys
Linksys re6250 Firmware
Weaknesses CWE-310
CWE-330
CPEs cpe:2.3:o:linksys:re6250_firmware:*:*:*:*:*:*:*:*
Vendors & Products Linksys
Linksys re6250 Firmware
References
Metrics cvssV2_0

{'score': 2.6, 'vector': 'AV:N/AC:H/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 3.7, 'vector': 'CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 3.7, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 6.3, 'vector': 'CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Linksys Re6250 Re6250 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-23T21:16:58.599Z

Reserved: 2026-10-21T18:20:56.562Z

Link: CVE-2026-114576

cve-icon Vulnrichment

Updated: 2026-10-23T18:00:50.565Z

cve-icon NVD

Status : Deferred

Published: 2026-10-22T02:16:55.440

Modified: 2026-10-23T22:16:57.337

Link: CVE-2026-114576

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-22T06:00:14Z

Weaknesses