Lb-link vulnerabilities

Products

• Bl-ac3600 6
• Bl-wr9000 6
• Bl-wr9000 Firmware 4
• Ac1900 Firmware 3
• Ac1900 Router 3
• Bl-ac1900 3
• Bl-ac2100 Az3 3
• Bl-ac2100 Firmware 3
• Bl-ax1800 3
• Bl-ax5400p 3
• Bl-w1210m Firmware 3
• Bl-ac3600 Firmware 2
• Bl-w1210m 2
• Bl-x26 2
• Bl-x26 Firmware 2
• X-pro 2

Newest

• lb-link bl-cpe600eu LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure CVE-2026-96606 6.9 MediumSeptember 23, 2026
• lb-link ac1900 firmware A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare... CVE-2026-35867 3.1 LowSeptember 13, 2026
• lb-link wr1210m LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication CVE-2026-19971 Public exploit 5.3 MediumAugust 17, 2026
• lb-link x-pro LB-LINK X-PRO easycwmp hard-coded credentials CVE-2026-19901 9.2 CriticalAugust 15, 2026
• lb-link x-pro LB-LINK X-PRO shadow hard-coded credentials CVE-2026-19900 Public exploit 9.2 CriticalAugust 15, 2026
• lb-link bl-wr9000, bl-wr9000 firmware +1 more LB-LINK BL-WR9000 set_wifi sub_458754 command injection CVE-2026-4228 EPSS 12.9% 5.3 MediumMarch 16, 2026
• lb-link bl-wr9000, bl-wr9000 firmware +1 more LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow CVE-2026-4227 8.7 HighMarch 16, 2026
• lb-link bl-wr9000, bl-wr9000 firmware +1 more LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow CVE-2026-4226 8.7 HighMarch 16, 2026
• b-link bl-ac2100, lb-link bl-ac2100 firmware +1 more B-Link BL-AC2100 Web Management set_delshrpath_cfg delshrpath stack-based overflow CVE-2025-10773 8.7 HighSeptember 22, 2025
• lb-link bl-cpe300m firmware The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01... CVE-2025-57278 8.8 HighSeptember 9, 2025
• lb-link bl-x26, bl-x26 firmware +1 more LB-LINK BL-X26 HTTP set_blacklist os command injection CVE-2025-9580 5.3 MediumAugust 28, 2025
• lb-link bl-x26, b-link bl-x26 firmware +1 more LB-LINK BL-X26 HTTP set_hidessid_cfg os command injection CVE-2025-9579 5.3 MediumAugust 28, 2025
• lb-link bl-ac1900, bl-ac3600, bl-ax1800 +3 more +5 more LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication CVE-2025-7574 9.3 CriticalJuly 14, 2025
• lb-link bl-ac1900, bl-ac3600, bl-ax1800 +3 more +5 more LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure CVE-2025-7573 6.9 MediumJuly 14, 2025
• lb-link bl-ac1900, bl-ac3600, bl-ax1800 +3 more +5 more LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure CVE-2025-7572 6.9 MediumJuly 14, 2025
• lb-link bl-ac3600, bl-ac3600 firmware +1 more LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure CVE-2025-7565 6.9 MediumJuly 14, 2025
• lb-link bl-ac3600, bl-ac3600 firmware +1 more LB-LINK BL-AC3600 shadow hard-coded credentials CVE-2025-7564 8.5 HighJuly 14, 2025
• lb-link bl-ac3600 LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection CVE-2025-4076 EPSS 19.8% 5.3 MediumApril 29, 2025
• lb-link bl-ac2100 firmware An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via... CVE-2025-29063 9.8 CriticalApril 2, 2025
• lb-link bl-ac2100 firmware An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1... CVE-2025-29062 9.8 CriticalApril 2, 2025
• lb-link ac1900 router, ac1900 firmware +1 more LB-LINK AC1900 Router set_blacklist websGetVar os command injection CVE-2025-1610 EPSS 13.2% 5.3 MediumFebruary 24, 2025
• lb-link ac1900 router, ac1900 firmware +1 more LB-LINK AC1900 Router set_cmd websGetVar os command injection CVE-2025-1609 EPSS 10.2% 5.3 MediumFebruary 24, 2025
• lb-link ac1900 router, ac1900 firmware +1 more LB-LINK AC1900 Router set_manpwd websGetVar os command injection CVE-2025-1608 EPSS 10.2% 5.3 MediumFebruary 24, 2025
• lb-link bl-wr1300h firmware LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily... CVE-2024-51431 9.8 CriticalNovember 1, 2024
• lb-link bl-w1210m, bl-w1210m firmware +1 more LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the... CVE-2024-33377 8.1 HighJune 14, 2024
• lb-link bl-w1210m, bl-w1210m firmware +1 more LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's... CVE-2024-33375 9.8 CriticalJune 14, 2024
• lb-link bl-w1210m firmware An issue in the LB-LINK BL-W1210M v2.0 router allows attackers to bypass password complexity... CVE-2024-33373 6.3 MediumJune 14, 2024
• lb-link bl-ac1900 firmware, bl-lte300 firmware, bl-wr9000 firmware +1 more +3 more LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL... CVE-2023-26801 EPSS 77.7% 9.8 CriticalMarch 26, 2023