CVE-2026-4227: falha de alta gravidade em LB-LINK BL-WR9000
LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow
Publicada em
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.7epss 1.1%
probabilidade de exploração
1.1%top 35% das CVEs
exploração observada
nãonenhuma fonte reporta
A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub_44D844 of the file /goform/get_hidessid_cfg. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Produtos afetados
LB-LINK · BL-WR9000CVEs relacionadas — LB-LINK BL-WR9000
No mesmo produto, das mais perigosas para as menos.
CVE-2026-4228MEDIUMLB-LINK BL-WR9000 set_wifi sub_458754 command injectionEPSS 8.9%CVE-2026-4226HIGHLB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflowEPSS 1.1%CVE-2025-7574CRITICALLB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authenticationEPSS 0.8%CVE-2025-7573MEDIUMLB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosureEPSS 0.4%CVE-2025-7572MEDIUMLB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosureEPSS 0.4%