EIP-2026-101034

PRE-CVE

Linksys Devices 1.42/1.43 - 'GET' Buffer Overflow (PoC)

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-101034. PoCs published by Core Security.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Linksys Broadband Router devices by sending an overly long GET request. The payload is crafted to overwrite the return address, potentially allowing arbitrary code execution.

Description

Linksys Devices 1.42/1.43 - 'GET' Buffer Overflow (PoC)

Exploits (1)

exploitdb WORKING POC VERIFIED

by Core Security · pythondoshardware

https://www.exploit-db.com/exploits/22062

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in Linksys Broadband Router devices by sending an overly long GET request. The payload is crafted to overwrite the return address, potentially allowing arbitrary code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Linksys Broadband Router (versions 1.42.7 and 1.43)

No auth needed

Prerequisites: Network access to the vulnerable device · Device must be running a vulnerable firmware version

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026