CVE-2026-4226: LB-LINK BL-WR9000 get_virtual_cfg sub_44E8D0 stack-based overflow
A weakness has been identified in LB-LINK BL-WR9000 2.4.9. The affected element is the function sub44E8D0 of the file /goform/getvirtualcfg. Executing a manipulation can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4226?
CVE-2026-4226 is classified as a critical vulnerability due to its potential to cause a stack-based buffer overflow.
How do I fix CVE-2026-4226?
To fix CVE-2026-4226, update the LB-LINK BL-WR9000 firmware to the latest version provided by the manufacturer.
What systems are affected by CVE-2026-4226?
CVE-2026-4226 specifically affects the LB-LINK BL-WR9000 router running version 2.4.9.
What type of attack can exploit CVE-2026-4226?
CVE-2026-4226 can be exploited through a manipulation that leads to a stack-based buffer overflow.
What are the potential consequences of CVE-2026-4226?
Exploitation of CVE-2026-4226 could allow an attacker to execute arbitrary code or crash the affected system.