CVE-2026-19971 | LB-Link WR1210M 1.0.3 Backup Endpoint /www/cgi-bin/backup.cgi main missing authentication

A vulnerability, which was classified as problematic, has been found in LB-Link WR1210M 1.0.3. This impacts the function main of the file /www/cgi-bin/backup.cgi of the component Backup Endpoint. This manipulation causes missing authentication.

This vulnerability is tracked as CVE-2026-19971. The attack is only possible within the local network. No exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.