Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-35869

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 LB-link 路由器的 AC450M V4.0.0 版本中， 库中的 函数存在命令注入漏洞。该漏洞源于对用户输入数据缺乏充分的验证和清理，导致其未经安全处理便被传入系统级命令执行环境。攻击者可通过向易受影响的参数中注入特制的 shell 元字符或负载（payload），从而触发任意操作系统命令的执行。

AI Predicted 9.8 Difficulty: Easy EPSS 0.53% · P42

Possible ATT&CK Techniques 1 AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a n/a n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-35869

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An attacker can exploit this vulnerability by injecting specially crafted shell metacharacters or payloads into the vulnerable parameter, resulting in the execution of arbitrary operating system commands.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2026-35869

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-35869

请登录查看更多情报信息。

Proof of Concept for CVE-2026-35869 (1)

Same Patch Batch · n/a · 2026-08-27 · 62 CVEs total

CVE-2026-75419 8.8 HIGH GoWind低于1.0.0存在授权缺失漏洞
CVE-2026-75418 7.5 HIGH Lektor<3.3.14 Windows下路径遍历漏洞
CVE-2026-37004 BerriAI litellm<=1.82.4模板注入漏洞
CVE-2026-38347 FFmpeg git-master 堆溢出致拒绝服务
CVE-2026-38349 FFmpeg N-122528 hScale16To19_c整数溢出致DoS
CVE-2026-38346 FFmpeg N-122528：整数溢出致DoS
CVE-2026-37068 VFM 4.4.9 认证用户任意文件写入
CVE-2026-37198 Open5GS v2.7.6 SMF组件整数溢出致服务拒绝
CVE-2026-37007 crewai-tools 1.10.2rc1 路径遍历致代码执行
CVE-2026-37067 Veno File Manager 4.4.9 日志未认证访问
CVE-2026-37069 Veno File Manager 4.4.9 绝对路径泄露漏洞
CVE-2026-37064 Veno File Manager 4.4.9 未认证用户枚举漏洞
CVE-2026-37003 Agno≤2.5.8提示词注入致远程代码执行
CVE-2026-37070 Veno 4.4.9 文件管理器访问控制不当
CVE-2026-37073 Veno File Manager 4.4.9访问控制缺陷致邮件发送
CVE-2026-37009 crewai-tools 1.10.2rc1 SQL注入漏洞
CVE-2026-37006 gpt-researcher v0.14.7之前WebSocket端点RCE漏洞
CVE-2026-37066 Veno File Manager 4.4.9 路径遍历致任意文件读取漏洞
CVE-2026-37071 Veno File Manager 4.4.9 任意文件重命名致权限提升
CVE-2026-37065 Veno File Manager 4.4.9 任意文件删除

Showing top 20 of 62 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2026-35869

No comments yet

Leave a comment