CVE-2026-4227

HIGH

LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow

Title source: cna

Description

A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub_44D844 of the file /goform/get_hidessid_cfg. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References (4)

Core 4

Core References

Vdb Entry, Technical Description vdb-entry technical-description

VDB-351150 | LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow

https://vuldb.com/?id.351150

Signature, Permissions Required signature permissions-required

VDB-351150 | CTI Indicators (IOB, IOC, IOA)

https://vuldb.com/?ctiid.351150

Third Party Advisory third-party-advisory

Submit #771209 | LB-LINK BL-WR9000 V2.4.9 Buffer Overflow

https://vuldb.com/?submit.771209

Exploit exploit

https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_HideSSID%20stack%20overflow_EN.md

View Exploit ZIP pw:eip

Scores

CVSS v3 8.8

EPSS 0.0066

EPSS Percentile 46.7%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-120 CWE-125 CWE-119

Status published

Products (2)

LB-LINK/BL-WR9000 2.4.9

lb-link/bl-wr9000_firmware 2.4.9

Published Mar 16, 2026

Tracked Since Mar 16, 2026