Skip to content
OpenAdvisories

Product · LB-LINK

BL-WR9000

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-4228 EPSS 14%

    LB-LINK BL-WR9000 set_wifi sub_458754 command injection

    A vulnerability was detected in LB-LINK BL-WR9000 2.4.9. This affects the function sub_458754 of the file /goform/set_wifi. The manipulation results in command injection. It is possible to launch the attack remotely. The exploit is now public and may be used.…

    LB-LINK BL-WR9000
  • Medium 5.3
    CVE-2025-7573

    LB-LINK BL-WR9000 lighttpd.cgi bs_GetManPwd information disclosure

    A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This issue affects the function bs_GetManPwd in the library libblinkapi.so of the file /cgi-b…

    LB-LINK BL-AC3600 BL-WR9000 BL-AX1800
  • Medium 5.3
    CVE-2025-7572

    LB-LINK BL-WR9000 lighttpd.cgi bs_GetHostInfo information disclosure

    A vulnerability classified as critical was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This vulnerability affects the function bs_GetHostInfo in the library libblinkapi.so of the file /cgi-bin/ligh…

    LB-LINK BL-AC3600 BL-WR9000 BL-AX1800