CVE-2026-4227

CVE-2026-4227 describes a high-severity buffer overflow vulnerability impacting the LB-LINK BL-WR9000 router, specifically within the sub_44D844 function of its /goform/get_hidessid_cfg component. This flaw allows an unauthenticated attacker to remotely trigger a denial of service, reflected in its CVSSv3.1 score of 7.5 (High) with a vector indicating network-based, low-complexity exploitation. While the vulnerability details have been publicly disclosed, there is currently no evidence of active exploitation in the wild, and no readily available exploit modules exist in common frameworks like Metasploit or Nuclei. The vendor has not responded to disclosure attempts, and community discussion or media coverage remains minimal.