Advisories · Technology

LB-LINK BL-WR9000.

Every CVE that names LB-LINK BL-WR9000 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-4228 CVE record

CVSS 5.3 Medium

LB-LINK BL-WR9000 set_wifi sub_458754 command injection
- LB-LINK BL-WR9000
- Other injection
- Command injection
Not analysed yet 16 Mar 2026
CVE-2026-4227 CVE record

CVSS 8.7 High

LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow
- LB-LINK BL-WR9000
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2026-4226 CVE record

CVSS 8.7 High

LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow
- LB-LINK BL-WR9000
- Memory corruption
Not analysed yet 16 Mar 2026
CVE-2025-7574 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication
- LB-LINK BL-AC1900
- LB-LINK BL-AC2100_AZ3
- Authentication bypass
Not analysed yet 14 Jul 2025
CVE-2025-7573 CVE record

CVSS 6.9 Medium

LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure
- LB-LINK BL-AC1900
- LB-LINK BL-AC2100_AZ3
- Information disclosure
- Broken access control
Not analysed yet 14 Jul 2025
CVE-2025-7572 CVE record

CVSS 6.9 Medium

LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure
- LB-LINK BL-AC1900
- LB-LINK BL-AC2100_AZ3
- Information disclosure
- Broken access control
Not analysed yet 14 Jul 2025