Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2023-26801

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg.

CVSS 3.1 · 9.8 Critical EPSS 77.7% KEV · Not listed
Vendors
Lb-link
Products
Bl-ac1900 Bl-ac1900 Firmware Bl-lte300 and 5 more
CVE-2025-29062

An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Lb-link
Products
Bl-ac2100 Bl-ac2100 Firmware
CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Lb-link
Products
Bl-ac2100 Bl-ac2100 Firmware