CVE-2025-57278

The LB-Link BL-CPE300M AX300 4G LTE Router (firmware version BL-R8800_B10_ALK_SL_V01.01.02P42U14_06 ) is vulnerable to a complete authentication bypass due to improper session handling. The device fails to use session tokens, cookies, or unique identifiers; instead, it grants access to any client...