CVE-2026-4227: LB-LINK BL-WR9000 get_hidessid_cfg sub_44D844 buffer overflow
A security vulnerability has been detected in LB-LINK BL-WR9000 2.4.9. The impacted element is the function sub44D844 of the file /goform/gethidessidcfg. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4227?
CVE-2026-4227 has a critical severity due to the potential for remote code execution via buffer overflow.
How do I fix CVE-2026-4227?
To fix CVE-2026-4227, update the firmware of LB-LINK BL-WR9000 to the latest version provided by the manufacturer.
What type of vulnerability is CVE-2026-4227?
CVE-2026-4227 is classified as a buffer overflow vulnerability affecting the get_hidessid_cfg function.
Who is affected by CVE-2026-4227?
Users of the LB-LINK BL-WR9000 version 2.4.9 are affected by CVE-2026-4227.
What can an attacker do with CVE-2026-4227?
An attacker can exploit CVE-2026-4227 to execute arbitrary code on the affected LB-LINK BL-WR9000 device.