TI-2023-11781 Aliases CVE-2023-26801 GHSA-c5pj-m2vw-68wh

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and…

CRITICAL 88CWE-77Published 2023-03-26 · Updated 2025-05-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-77.

Summary

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.7769 99th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 8

CPE	Versions	Role	Vendor
cpe:2.3:o:lb-link:bl-lte300_firmware:1.0.8:::::::*	1.0.8	Vulnerable	LB-LINK
cpe:2.3:h:lb-link:bl-lte300:-:::::::*	not specified by NVD	Running on	LB-LINK
cpe:2.3:o:lb-link:bl-x26_firmware:1.2.5:::::::*	1.2.5	Vulnerable	LB-LINK
cpe:2.3:h:lb-link:bl-x26:-:::::::*	not specified by NVD	Running on	LB-LINK
cpe:2.3:o:lb-link:bl-wr9000_firmware:2.4.9:::::::*	2.4.9	Vulnerable	LB-LINK
cpe:2.3:h:lb-link:bl-wr9000:-:::::::*	not specified by NVD	Running on	LB-LINK
cpe:2.3:o:lb-link:bl-ac1900_firmware:1.0.1:::::::*	1.0.1	Vulnerable	LB-LINK
cpe:2.3:h:lb-link:bl-ac1900:2.0:::::::*	2.0	Running on	LB-LINK

cpe:2.3:o:lb-link:bl-lte300_firmware:1.0.8:*:*:*:*:*:*:* Versions 1.0.8 Vulnerable ·LB-LINK
cpe:2.3:h:lb-link:bl-lte300:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·LB-LINK
cpe:2.3:o:lb-link:bl-x26_firmware:1.2.5:*:*:*:*:*:*:* Versions 1.2.5 Vulnerable ·LB-LINK
cpe:2.3:h:lb-link:bl-x26:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·LB-LINK
cpe:2.3:o:lb-link:bl-wr9000_firmware:2.4.9:*:*:*:*:*:*:* Versions 2.4.9 Vulnerable ·LB-LINK
cpe:2.3:h:lb-link:bl-wr9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·LB-LINK
cpe:2.3:o:lb-link:bl-ac1900_firmware:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 Vulnerable ·LB-LINK
cpe:2.3:h:lb-link:bl-ac1900:2.0:*:*:*:*:*:*:* Versions 2.0 Running on ·LB-LINK

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-26801
2026-10-03 Alias added: GHSA-c5pj-m2vw-68wh

References

Exploit 1

https://github.com/winmt/my-vuls/tree/main/LB-LINK%20BL-AC1900%2C%20BL-WR9000%2C%20BL-X26%20and%20BL-LTE300%20Wireless%20Routers

Other 1

https://www.akamai.com/blog/security-research/cve-2023-26801-exploited-spreading-mirai-botnet

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences