PatchTheCVElb-link vulnerabilities
Recent CVEs affecting lb-link products. 14 tracked.
lb-link has 14 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-03-16. Highest priority: CVE-2025-29063 (score 61/100).
- CVE-2025-7564 HIGH 7.8 UPGRADE A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22
- CVE-2025-9580 MEDIUM 6.3 MITIGATE A security vulnerability has been detected in LB-LINK BL-X26 1.2.8
- CVE-2026-4228 MEDIUM 6.3 MITIGATE A vulnerability was detected in LB-LINK BL-WR9000 2.4.9
- CVE-2026-4227 HIGH 8.8 MITIGATE A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9
- CVE-2026-4226 HIGH 8.8 MITIGATE A weakness has been identified in LB-LINK BL-WR9000 2.4.9
- CVE-2025-7565 MEDIUM 5.3 UPGRADE A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22
- CVE-2025-57278 HIGH 8.8 MITIGATE The LB-Link BL-CPE300M AX300 4G LTE Router firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 does not im
- CVE-2025-29063 CRITICAL 9.8 UPGRADE An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable para
- CVE-2025-29062 CRITICAL 9.8 UPGRADE An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 para
- CVE-2025-1610 MEDIUM 6.3 MITIGATE A vulnerability was found in LB-LINK AC1900 Router 1.0.2 and classified as critical
- CVE-2025-1609 MEDIUM 6.3 MITIGATE A vulnerability has been found in LB-LINK AC1900 Router 1.0.2 and classified as critical
- CVE-2025-1608 MEDIUM 6.3 MITIGATE A vulnerability, which was classified as critical, was found in LB-LINK AC1900 Router 1.0.2
- CVE-2025-10773 HIGH 8.8 UPGRADE A security flaw has been discovered in B-Link BL-AC2100 up to 1.0.3
- CVE-2024-51431 CRITICAL 9.8 MITIGATE LB-LINK BL-WR 1300H v.1.0.4 contains hardcoded credentials stored in /etc/shadow which are easily guessable.
FAQ
How do I fix lb-link vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lb-link being exploited right now?
None of the tracked lb-link CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lb-link CVE should I patch first?
CVE-2025-29063 currently ranks highest (61/100): An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable para.