BL-X26 vulnerabilities

2 known vulnerabilities in BL-X26 from Lb-link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  BL-X26: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-9580Aug 28, 2025Lb-linkEPSS 5.55%

  A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launche

• 8.8 High severity

  BL-X26: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-9579Aug 28, 2025Lb-linkEPSS 5.71%

  A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be init