Linksys - E1700 - CRITICAL - CVE-2026-108894. A security flaw in Linksys E1700 version 1.0.0.4.003 has been identified, impacting the functionality of the static route handler. Specifically, vulnerabilities exist in the addStaticRoute function located in /goform/addStaticRoute, allowing attackers to manipulate arguments related to static routes. This manipulation can lead to OS command injection, facilitating potential remote exploitation. The vulnerability has been publicly disclosed, and the vendor has not provided a response concerning this critical issue. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io