Log in Start free

LB-LINK

Products

ProductCVEsExploitedLatest
BL-WR90006–Mar 16, 2026
BL-AC36006–Jul 14, 2025
BL-AC19003–Jul 14, 2025
BL-AX18003–Jul 14, 2025
BL-AX5400P3–Jul 14, 2025
BL-AC2100_AZ33–Jul 14, 2025
AC1900 Router3–Feb 24, 2025
X-PRO2–Aug 15, 2026
BL-X262–Aug 28, 2025
AC1900 firmware1–Sep 13, 2026
WR1210M1–Aug 17, 2026
BL-CPE600EU1–Sep 23, 2026

Exploited and recent CVEs

  • CVE-2026-96606 Medium 5.3 LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure 0.5%
  • CVE-2026-35867 Low 3.1 A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-LINK router AC1900_AZ2 V1.0.2 via shell metacharacters, if the device is deployed 1.0%
  • CVE-2026-19971 Medium 4.7 LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication 0.4%
  • CVE-2026-19901 High 8.1 LB-LINK X-PRO easycwmp hard-coded credentials 0.8%
  • CVE-2026-19900 High 8.1 LB-LINK X-PRO shadow hard-coded credentials 2.9%
  • CVE-2026-4228 Medium 6.3 LB-LINK BL-WR9000 set_wifi sub_458754 command injection 12.9%
  • CVE-2026-4227 High 8.8 LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow 0.7%
  • CVE-2026-4226 High 8.8 LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow 0.7%
  • CVE-2025-9580 Medium 6.3 LB-LINK BL-X26 HTTP set_blacklist os command injection 5.5%
  • CVE-2025-9579 Medium 6.3 LB-LINK BL-X26 HTTP set_hidessid_cfg os command injection 5.7%
  • CVE-2025-7574 Critical 9.8 LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication 0.9%
  • CVE-2025-7574 Critical 9.8 LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication 0.9%
  • CVE-2025-7574 Critical 9.8 LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication 0.9%
  • CVE-2025-7574 Critical 9.8 LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication 0.9%
  • CVE-2025-7574 Critical 9.8 LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication 0.9%
  • CVE-2025-7574 Critical 9.8 LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication 0.9%
  • CVE-2025-7573 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure 0.4%
  • CVE-2025-7573 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure 0.4%
  • CVE-2025-7573 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure 0.4%
  • CVE-2025-7573 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure 0.4%
  • CVE-2025-7573 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure 0.4%
  • CVE-2025-7573 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure 0.4%
  • CVE-2025-7572 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure 0.4%
  • CVE-2025-7572 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure 0.4%
  • CVE-2025-7572 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure 0.4%
  • CVE-2025-7572 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure 0.4%
  • CVE-2025-7572 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure 0.4%
  • CVE-2025-7572 Medium 5.3 LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure 0.4%
  • CVE-2025-7565 Medium 5.3 LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure 0.8%
  • CVE-2025-7564 High 7.8 LB-LINK BL-AC3600 shadow hard-coded credentials 0.3%