CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
WAVLINK WL-WN530HG4B Router wapi.cgi Port Forwarding Remote Command Injection Vulnerability (CVE-2026-120197) Technical Advisory
[Affected Scope] WAVLINK WL-WN530HG4B router with firmware version M_V260724.
[Impact] Authenticated remote attackers can exploit the 'Name' parameter within the port forwarding function of '/cgi-bin/wapi.cgi' to execute arbitrary OS commands with root privileges.
[Mitigation] Restrict access to the router's management interface, apply firewall rules to block malicious payloads, and upgrade to the latest patched firmware version.
Wavlink WN579X3-D Router wapi.cgi Remote Command Injection Vulnerability (CVE-2026-120196) Analysis and Mitigation Guide
[Affected Scope] Wavlink WN579X3-D V250402 firmware version.
[Impact] An authenticated remote attacker can manipulate the 'Name' parameter in the port forwarding configuration API to execute arbitrary OS commands with root privileges.
[Mitigation] Restrict external access to the router's management interface and apply the latest firmware patch from the vendor immediately.