A buffer overflow vulnerability (CVE-2026-4227) has been discovered in LB-LINK BL-WR9000 router version 2.4.9. The vulnerability affects the function sub_44D844 in the file /goform/get_hidessid_cfg and can be exploited remotely. The exploit has been publicly disclosed and is available for use. The vulnerability allows attackers to manipulate the system through buffer overflow techniques. The vendor was contacted about the disclosure but did not respond to the security report.