CyberSecBulletin

B-link vulnerabilities

We track 7 vulnerabilities in B-link products across 11 products. 7 are rated high or critical, and none are known to be exploited. The most recent was published on September 22, 2025.

7vulnerabilities
5critical
2high
0exploited
9.5average CVSS score

Latest B-link vulnerabilities

  • 8.8 High severity

    BL-AC2100: Out-of-bounds Write

    CVE-2025-10773B-linkEPSS 4.56%

    A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-base

  • 8.8 High severity

    BL-X26: Improper Neutralization of Special Elements used in an OS Command

    CVE-2025-9579Lb-linkEPSS 5.71%

    A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be init

  • 9.8 Critical severity

    Bl-wr9000 Firmware: Improper Neutralization of Special Elements used in a Command

    CVE-2025-45988B-linkEPSS 9.8%

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd par

  • 9.8 Critical severity

    Bl-wr9000 Firmware: Improper Neutralization of Special Elements used in a Command

    CVE-2025-45987B-linkEPSS 1.69%

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 an

  • 9.8 Critical severity

    Bl-x10 Ac8 Firmware: Improper Neutralization of Special Elements used in a Command

    CVE-2025-45986B-linkEPSS 1.69%

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 werediscovered to contain a command injection vulnerability via the mac parameter in

  • 9.8 Critical severity

    Bl-wr9000 Firmware: Improper Neutralization of Special Elements used in a Command

    CVE-2025-45985B-linkEPSS 6.79%

    Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bs_SetSSIDHide f

  • 9.8 Critical severity

    Bl-wr9000 Firmware: Improper Neutralization of Special Elements used in a Command

    CVE-2025-45984B-linkEPSS 1.69%

    Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_AT1 V1.0.0, BL-X26_AC8 V1.2.8, BLAC450M_AE4 V4.0.0 and BL-X26_DA3 V1.2.7 were discovered to contain a command injection vulnerability via the