Is CVE-2026-19971 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-19971 being exploited in the wild.

How severe is CVE-2026-19971?

Medium severity, with a CVSS score of 4.7, published 17 August 2026.

Is there a fix for CVE-2026-19971?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-19971 attacked?

It is attacked from the adjacent network.

Am I affected by CVE-2026-19971?

Check whether you run LB-Link WR1210M at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-19971: LB-Link WR1210M authentication bypass in backup utility

CVE-2026-19971 · Severity: medium · CVSS 4.7 · Published 2026-08-17

LB-Link WR1210M is a wireless router used to provide network connectivity in homes and small businesses. The backup utility, accessible via a web interface, fails to authenticate users before allowing critical configuration operations. An attacker with local network access can export or modify the router's configuration without credentials, potentially compromising network security and enabling further attacks.

Vendors: LB-Link.

Quick answers

Is CVE-2026-19971 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-19971 being exploited in the wild.
How severe is CVE-2026-19971?: Medium severity, with a CVSS score of 4.7, published 17 August 2026.
Which products and versions are affected?: LB-Link WR1210M 1.0.3.
Is there a fix for CVE-2026-19971?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-19971 attacked?: It is attacked from the adjacent network.
Am I affected by CVE-2026-19971?: Check whether you run LB-Link WR1210M at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This is an authentication bypass vulnerability in the Backup Endpoint component, specifically in the /www/cgi-bin/backup.cgi script's main function. The flaw allows unauthenticated access to backup and restore operations on the router. Attack precondition: attacker must be on the same local network as the affected device (adjacent network vector). Successful exploitation enables an attacker to dump the router configuration (which may contain credentials) or inject a malicious configuration to modify network settings, create backdoors, or redirect traffic. The vendor did not respond to early disclosure attempts. No patch status is currently known.

Affected products

LB-Link WR1210M 1.0.3

Timeline

2026-08-17: disclosed
other: Vendor contacted early but did not respond

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.