> CVE-2026-35868

« BACK_TO_HOME
PUBLISHED
2026-08-27 20:17
MODIFIED
2026-08-27 20:17
EPSS (Prob. Exploit)
2.34%
Top 16.5%
DATA SOURCES:
NVD 🔗 2026-08-27 FIRST EPSS 🔗 2026-10-25

> DESCRIPTION

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An attacker can exploit this vulnerability by injecting specially crafted shell metacharacters or payloads into the vulnerable parameter, resulting in the execution of arbitrary operating system commands.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/08/2026 20:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 2 months ago

> REFERENCES

https://github.com/Orcust-Automaton/Vulnerability/blob/main/LB-Link/AC2100_AZ3/b...
« BACK_TO_HOME