Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

LB-LINK — Vulnerabilities & Security Advisories 19

Browse all 19 CVE security advisories affecting LB-LINK. AI-powered Chinese analysis, POCs, and references for each vulnerability.

LB-LINK specializes in networking equipment, including routers and switches, for small to medium businesses and home users. Historically, their products have been vulnerable to multiple remote code execution, cross-site scripting, and privilege escalation flaws, with 14 CVEs documented. Security researchers have frequently identified authentication bypass issues and insecure default configurations. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests potential risks in unpatched deployments. Their devices often lack timely security updates, leaving exposed networks susceptible to exploitation. Organizations using LB-LINK equipment should prioritize regular firmware updates and network segmentation to mitigate potential threats.

CVE ID Title CVSS Severity Published
CVE-2026-96606 LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure — BL-CPE600EU CWE-200 5.3 Medium 2026-09-23
CVE-2026-35867 LB-LINK AC1900 命令注入漏洞 — AC1900 firmware CWE-78 3.1 Low 2026-09-13
CVE-2026-19971 LB-Link WR1210M Backup Endpoint backup.cgi main missing authentication — WR1210M CWE-306 4.7 Medium 2026-08-17
CVE-2026-19901 LB-LINK X-PRO easycwmp hard-coded credentials — X-PRO CWE-798 8.1 High 2026-08-15
CVE-2026-19900 LB-LINK X-PRO shadow hard-coded credentials — X-PRO CWE-798 8.1 High 2026-08-15
CVE-2026-4228 LB-LINK BL-WR9000 set_wifi sub_458754 command injection — BL-WR9000 CWE-77 6.3 Medium 2026-03-16
CVE-2026-4227 LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow — BL-WR9000 CWE-120 8.8 High 2026-03-16
CVE-2026-4226 LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow — BL-WR9000 CWE-121 8.8 High 2026-03-16
CVE-2025-9580 LB-LINK BL-X26 HTTP set_blacklist os command injection — BL-X26 CWE-78 6.3 Medium 2025-08-28
CVE-2025-9579 LB-LINK BL-X26 HTTP set_hidessid_cfg os command injection — BL-X26 CWE-78 6.3 Medium 2025-08-28
CVE-2025-7574 LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication — BL-AC1900 CWE-287 9.8 Critical 2025-07-14
CVE-2025-7573 LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure — BL-AC1900 CWE-200 5.3 Medium 2025-07-14
CVE-2025-7572 LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure — BL-AC1900 CWE-200 5.3 Medium 2025-07-14
CVE-2025-7565 LB-LINK BL-AC3600 Web Management Interface lighttpd.cgi geteasycfg information disclosure — BL-AC3600 CWE-200 5.3 Medium 2025-07-14
CVE-2025-7564 LB-LINK BL-AC3600 shadow hard-coded credentials — BL-AC3600 CWE-798 7.8 High 2025-07-14
CVE-2025-4076 LB-LINK BL-AC3600 Password lighttpd.cgi easy_uci_set_option_string_0 command injection — BL-AC3600 CWE-77 6.3 Medium 2025-04-29
CVE-2025-1610 LB-LINK AC1900 Router set_blacklist websGetVar os command injection — AC1900 Router CWE-78 6.3 Medium 2025-02-24
CVE-2025-1609 LB-LINK AC1900 Router set_cmd websGetVar os command injection — AC1900 Router CWE-78 6.3 Medium 2025-02-24
CVE-2025-1608 LB-LINK AC1900 Router set_manpwd websGetVar os command injection — AC1900 Router CWE-78 6.3 Medium 2025-02-24

This page lists every published CVE security advisory associated with LB-LINK. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.