Vulnerabilities in LB-LINK
19 resultsCVE-2025-4076MEDIUMLB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injectionEPSS 19.8%CVE-2025-1610MEDIUMLB-LINK AC1900 Router set_blacklist websGetVar os command injectionEPSS 13.2%CVE-2025-1608MEDIUMLB-LINK AC1900 Router set_manpwd websGetVar os command injectionEPSS 10.2%CVE-2025-1609MEDIUMLB-LINK AC1900 Router set_cmd websGetVar os command injectionEPSS 10.2%CVE-2026-4228MEDIUMLB-LINK BL-WR9000 set_wifi sub_458754 command injectionEPSS 9.2%CVE-2025-9579MEDIUMLB-LINK BL-X26 HTTP set_hidessid_cfg os command injectionEPSS 5.7%CVE-2025-9580MEDIUMLB-LINK BL-X26 HTTP set_blacklist os command injectionEPSS 5.5%CVE-2026-19900CRITICALLB-LINK X-PRO shadow hard-coded credentialsEPSS 2.9%CVE-2026-4227HIGHLB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflowEPSS 1.1%CVE-2026-4226HIGHLB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflowEPSS 1.1%CVE-2026-35867LOWA Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2EPSS 1.0%CVE-2025-7574CRITICALLB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authenticationEPSS 0.9%CVE-2026-19901CRITICALLB-LINK X-PRO easycwmp hard-coded credentialsEPSS 0.8%CVE-2025-7565MEDIUMLB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosureEPSS 0.8%CVE-2026-19971MEDIUMLB-Link WR1210M Backup Endpoint backup.cgi main missing authenticationEPSS 0.4%CVE-2025-7573MEDIUMLB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosureEPSS 0.4%CVE-2025-7572MEDIUMLB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosureEPSS 0.4%CVE-2026-96606MEDIUMLB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosureEPSS 0.3%CVE-2025-7564HIGHLB-LINK BL-AC3600 shadow hard-coded credentialsEPSS 0.3%