CVE-2026-4227

HIGH

LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow

Title source: cna

Description

A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub_44D844 of the file /goform/get_hidessid_cfg. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

[Vdb Entry, Technical Description] https://vuldb.com/?id.351150

[Signature, Permissions Required] https://vuldb.com/?ctiid.351150

[Third Party Advisory] https://vuldb.com/?submit.771209

[Exploit] https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_HideSSID%20stack%20overflow_EN.md

View Exploit ZIP pw:eip

Scores

CVSS v3 8.8

EPSS 0.0014

EPSS Percentile 33.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-120 CWE-125 CWE-119

Status published

Products (2)

LB-LINK/BL-WR9000 2.4.9

lb-link/bl-wr9000_firmware 2.4.9

Published Mar 16, 2026

Tracked Since Mar 16, 2026