Bl-x26 Firmware vulnerabilities

2 known vulnerabilities in Bl-x26 Firmware from Lb-link. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  BL-X26: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-9580Aug 28, 2025Lb-linkEPSS 5.55%

  A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launche

• 9.8 Critical severity

  Bl-lte300 Firmware: Improper Neutralization of Special Elements used in a Command

  CVE-2023-26801Mar 26, 2023Lb-linkEPSS 77.7%

  LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg.