CVE-2026-96606

Received Received - Intake

Information Disclosure in LB-Link BL-CPE600EU Firmware

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: VulDB

Description

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mifi_config.bin of the component Configuration Backup Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-23

Last Modified

2026-09-23

Generated

2026-09-24

AI Q&A

2026-09-24

EPSS Evaluated

N/A

NVD

CVE-2026-96606

Affected Vendors & Products

Vendor	Product	Version / Range
lb-link	bl-cpe600eu	5.8.13

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-284	The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability is an information disclosure flaw in LB-Link BL-CPE600EU version 5.8.13. It involves the file Mifi_config.bin in the Configuration Backup Handler component. The issue allows unauthorized remote access to sensitive information due to improper handling of configuration data.

Detection Guidance

This vulnerability involves a security flaw in LB-Link BL-CPE600EU 5.8.13 where the Mifi_config.bin file in the Configuration Backup Handler component may leak information. Detection may involve checking for unauthorized access to configuration files or unusual network traffic patterns. No specific commands are provided in the context.

Impact Analysis

An attacker could remotely exploit this flaw to access confidential data stored in the device's configuration backup. This may include network settings, credentials, or other sensitive information, potentially leading to further attacks or data breaches.

Compliance Impact

This vulnerability could lead to unauthorized data exposure, violating GDPR's data protection requirements or HIPAA's safeguards for protected health information. Organizations using this device may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Isolate affected LB-Link BL-CPE600EU devices from the network to prevent remote exploitation. Disable configuration backup features if not required. Monitor network traffic for unusual activity targeting Mifi_config.bin files.

Hi! I’m here to help you understand CVE-2026-96606. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70