CVE-2023-26801

CVE Enrichment

CVSS: 9.8 CRITICAL
EPSS: 69.66%
EPSS Percentile: 99.36%
CISA KEV: Not listed

Description

LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vulnerability via the mac, time1, and time2 parameters at /goform/set_LimitClient_cfg.

Technical Details

CVSS Version: 3.1
CNA / NVD Source: cve@mitre.org
Published: 27-Mar-2023 04:15
Last Modified: 17-Jun-2026 12:43
EPSS Date: 2026-10-13
CWE: CWE-77

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:H /
                            A:H

Affected Products / Versions

lb-link / bl-lte300_firmware
Version / affected range: 1.0.8
cpe:2.3:o:lb-link:bl-lte300_firmware:1.0.8:*:*:*:*:*:*:*
lb-link / bl-x26_firmware
Version / affected range: 1.2.5
cpe:2.3:o:lb-link:bl-x26_firmware:1.2.5:*:*:*:*:*:*:*
lb-link / bl-wr9000_firmware
Version / affected range: 2.4.9
cpe:2.3:o:lb-link:bl-wr9000_firmware:2.4.9:*:*:*:*:*:*:*
lb-link / bl-ac1900_firmware
Version / affected range: 1.0.1
cpe:2.3:o:lb-link:bl-ac1900_firmware:1.0.1:*:*:*:*:*:*:*

References

Last enrichment sync: 14-Oct-2026 10:21
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE-2023-26801 LB-LINK mac ClingSTUN Linux Backdoor Abuses Public STUN Services to Control Compromised IoT Devices

CVE (30)

Malware (4)

People (1)

MITRE ATT&CK (10)

Vendors (19)

Products (14)

Tools (8)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.