Information Disclosure Vulnerability in LB-Link BL-CPE600EU Router

CVE-2026-96606

What is CVE-2026-96606?

A security flaw has been identified in the LB-Link BL-CPE600EU router, specifically affecting the configuration backup handler within the Mifi_config.bin file. This vulnerability allows for unauthorized information disclosure, which can potentially be exploited by malicious actors remotely. The exploit code has already been made public, increasing the urgency for users to address this issue. Despite attempts to communicate the vulnerability to LB-Link, there has been no response from the vendor regarding mitigation.

References