Vulnerabilities

TI-2026-63821 CVE-2026-96606 · GHSA-48fm-24x4-p42q

LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure

LOW 37

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00483 Published 2026-09-23 No fix listed CWE-200

TI-2026-27784 CVE-2026-35867 · GHSA-cw3c-9w3h-vf4q

OS command injection in LB-LINK AC1900 firmware

MEDIUM 48

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2 V1.0.2 via shell metacharacters, if the device is deployed in a scenario where…

CVSS 3.1LOW 3.1 Adjacent network High privileges No interaction EPSS 0.01017 Published 2026-09-13 No fix listed CWE-78

TI-2026-16192 CVE-2026-19971 · GHSA-68gf-2fwf-ggrm

LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication

LOW 24

A flaw has been found in LB-Link WR1210M 1.0.3.

CVSS 4.0MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00416 Published 2026-08-17 No fix listed CWE-287

TI-2026-16134 CVE-2026-19901 · GHSA-c8h5-32j5-pvrj

LB-LINK X-PRO easycwmp hard-coded credentials

HIGH 75

A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00765 Published 2026-08-15 No fix listed CWE-259

TI-2026-16133 CVE-2026-19900 · GHSA-6pw8-xc67-fhhg

LB-LINK X-PRO shadow hard-coded credentials

HIGH 75

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.02941 Published 2026-08-15 No fix listed CWE-259

TI-2026-03675 CVE-2026-4228 · GHSA-hxpm-2ppg-5m8m

LB-LINK BL-WR9000 set_wifi sub_458754 command injection

MEDIUM 57

A vulnerability was detected in LB-LINK BL-WR9000 2.4.9.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.12932 Published 2026-03-16 No fix listed CWE-74

TI-2026-03674 CVE-2026-4227 · GHSA-hj3v-rf5w-w57g

LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow

HIGH 73

A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00691 Published 2026-03-16 No fix listed CWE-119

TI-2026-03673 CVE-2026-4226 · GHSA-97g2-6cfp-4vhx

LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow

HIGH 73

A weakness has been identified in LB-LINK BL-WR9000 2.4.9.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00722 Published 2026-03-16 No fix listed CWE-119

TI-2025-09864 CVE-2025-10773 · GHSA-xvvh-w6wp-p287

B-Link BL-AC2100 Web Management set_delshrpath_cfg delshrpath stack-based overflow

HIGH 73

A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.04556 Published 2025-09-22 No fix listed CWE-119

TI-2025-35494 CVE-2025-57278 · GHSA-c68g-xh4v-hj6j

The LB-Link BL-CPE300M AX300 4G LTE Router firmware version…

HIGH 77

The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not implement proper session handling.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00431 Published 2025-09-09 No fix listed CWE-287

TI-2025-08773 CVE-2025-9580 · GHSA-6fg7-r75c-p826

LB-LINK BL-X26 HTTP set_blacklist os command injection

MEDIUM 57

A security vulnerability has been detected in LB-LINK BL-X26 1.2.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05548 Published 2025-08-28 No fix listed CWE-77

TI-2025-08772 CVE-2025-9579 · GHSA-c876-j5vh-467r

LB-LINK BL-X26 HTTP set_hidessid_cfg os command injection

MEDIUM 57

A weakness has been identified in LB-LINK BL-X26 1.2.8.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.05706 Published 2025-08-28 No fix listed CWE-77

TI-2025-06911 CVE-2025-7574 · GHSA-jw6q-rx83-mg5v

LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication

HIGH 81

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.0086 Published 2025-07-14 No fix listed CWE-287

TI-2025-06910 CVE-2025-7573 · GHSA-j64w-4gch-fqf7

LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure

HIGH 70

A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00408 Published 2025-07-14 No fix listed CWE-200

TI-2025-06909 CVE-2025-7572 · GHSA-h8c7-6g8w-2q9f

LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure

HIGH 70

A vulnerability classified as critical was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00408 Published 2025-07-14 No fix listed CWE-200

TI-2025-06902 CVE-2025-7565 · GHSA-mv26-xmf7-f832

LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure

HIGH 70

A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00757 Published 2025-07-14 No fix listed CWE-200

TI-2025-06901 CVE-2025-7564 · GHSA-hc7g-5qrx-9jvj

LB-LINK BL-AC3600 shadow hard-coded credentials

HIGH 72

A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00272 Published 2025-07-14 No fix listed CWE-259

TI-2025-03616 CVE-2025-4076 · GHSA-c587-35qx-9wwg

LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection

MEDIUM 57

A vulnerability classified as critical has been found in LB-LINK BL-AC3600 up to 1.0.22.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.19768 Published 2025-04-29 No fix listed CWE-74

TI-2025-20979 CVE-2025-29063 · GHSA-39p5-3m6f-c8xp

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary…

HIGH 82

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01095 Published 2025-04-02 No fix listed CWE-77

TI-2025-20978 CVE-2025-29062 · GHSA-rpvv-rj3m-qqgx

An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the…

HIGH 82

An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01095 Published 2025-04-02 No fix listed CWE-77

TI-2025-01383 CVE-2025-1610 · GHSA-6fj4-vx3m-g726

LB-LINK AC1900 Router set_blacklist websGetVar os command injection

MEDIUM 57

A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.13187 Published 2025-02-24 No fix listed CWE-77

TI-2025-01382 CVE-2025-1609 · GHSA-fw6f-4rpm-3gpw

LB-LINK AC1900 Router set_cmd websGetVar os command injection

MEDIUM 57

A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.1017 Published 2025-02-24 No fix listed CWE-77

TI-2025-01381 CVE-2025-1608 · GHSA-ch6g-xrcv-q4j3

LB-LINK AC1900 Router set_manpwd websGetVar os command injection

MEDIUM 63

A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.1017 Published 2025-02-24 No fix listed CWE-77

TI-2024-34368 CVE-2024-51431 · GHSA-prm4-7jr7-cm97

LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.

HIGH 76

LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00574 Published 2024-11-01 No fix listed CWE-798

TI-2024-22037 CVE-2024-33377 · GHSA-xvcq-gm57-37c5

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the…

HIGH 70

LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00442 Published 2024-06-14 No fix listed CWE-1021

Vulnerabilities

Filters