CVE-2026-19900 in X-PRO

Prediction

by VulDB Data Team • 08/14/2026

A vulnerability was identified in LB-LINK X-PRO 1.0.22-20231206. The impacted element is an unknown function of the file /etc/shadow. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

Once again VulDB remains the best source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-390090
• CPE: ready
• CWE: CWE-798 (confirmed)
• Exploit: Download
• CVSS: 8.1 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19900
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19900
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19900/