CVE-2026-4226: high-severity vulnerability in LB-LINK BL-WR9000
LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow
Published
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 1.1%
exploitation probability
1.1%top 35% of all CVEs
observed exploitation
nono source reports it
A weakness has been identified in LB-LINK BL-WR9000 2.4.9. The affected element is the function sub_44E8D0 of the file /goform/get_virtual_cfg. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Affected products
LB-LINK · BL-WR9000Related CVEs — LB-LINK BL-WR9000
In the same product, most dangerous first.
CVE-2026-4228MEDIUMLB-LINK BL-WR9000 set_wifi sub_458754 command injectionEPSS 8.9%CVE-2026-4227HIGHLB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflowEPSS 1.1%CVE-2025-7574CRITICALLB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authenticationEPSS 0.8%CVE-2025-7573MEDIUMLB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosureEPSS 0.4%CVE-2025-7572MEDIUMLB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosureEPSS 0.4%