VulnerabilityDeferred

CVE-2026-19971

This manipulation causes missing authentication.

MEDIUM 5.3EPSS 0.28%

Does this matter?

Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.

Description

A flaw has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication. The attack is only possible within the local network. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS 4.0: 5.3 MEDIUMCVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.28% probability · 21th percentile
CISA KEV: Not listed
Weakness: CWE-287, CWE-306
Source: cna@vuldb.com

References

https://vuldb.com/cve/CVE-2026-19971
https://vuldb.com/submit/873139
https://vuldb.com/vuln/391148
https://vuldb.com/vuln/391148/cti

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.