A vulnerability was found in B-Link BL-AC2100 up to 1.0.3. It has been declared as critical. Affected by this issue is the function delshrpath of the file /goform/set_delshrpath_cfg of the component Web Management Interface. The manipulation of the argument Type results in stack-based buffer overflow.

This vulnerability was named CVE-2025-10773. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.