CVE-2023-26801
LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg.
- Published Mar 26, 2023
- CVSS 9.8 critical
- 69.7% chance of exploitation in the next 30 days (EPSS)
- Public exploit code is available
In the news
- Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2 The Hacker News ·
- SiftRanking Canary Intelligence VulnCheck Blog ·