Vulnerabilities

TI-2026-03675 CVE-2026-4228 · GHSA-hxpm-2ppg-5m8m

LB-LINK BL-WR9000 set_wifi sub_458754 command injection

MEDIUM 57

A vulnerability was detected in LB-LINK BL-WR9000 2.4.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.12932 Published 2026-03-16 No fix listed CWE-74

TI-2026-03674 CVE-2026-4227 · GHSA-hj3v-rf5w-w57g

LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow

HIGH 73

A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00691 Published 2026-03-16 No fix listed CWE-119

TI-2026-03673 CVE-2026-4226 · GHSA-97g2-6cfp-4vhx

LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow

HIGH 73

A weakness has been identified in LB-LINK BL-WR9000 2.4.9.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00722 Published 2026-03-16 No fix listed CWE-119

TI-2023-11781 CVE-2023-26801 · GHSA-c5pj-m2vw-68wh

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and…

CRITICAL 88

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.7769 Published 2023-03-26 No fix listed CWE-77

Vulnerabilities

Filters

LB-LINK BL-WR9000 set_wifi sub_458754 command injection

LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow

LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and…