Skip to content
Command Injection Flaw in WAVLINK Routers Exposes Users to Remote Attacks

Command Injection Flaw in WAVLINK Routers Exposes Users to Remote Attacks

First seen 2 Nov 2026, 20:13 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 09:13 UTC
  • •CVE-2026-120195 and CVE-2026-120196 allow remote command execution on WAVLINK routers.
  • •Exploitation code is publicly available, increasing risk for users.
  • •No patches have been released, leaving devices vulnerable.

Two vulnerabilities, CVE-2026-120195 and CVE-2026-120196, have been identified in WAVLINK routers, allowing remote command execution without authentication. The flaws affect models WL-WN579A3-An and WN579X3-D, with the former linked to the initial setup wizard and the latter to the port forwarding module. Both vulnerabilities have been classified as by the National Vulnerability Database, with CVSS scores of 10.0 and 9.4, respectively. Exploitation code is already circulating publicly, and no patches are currently available from the manufacturer. Users are at risk, particularly in regions like Latin America, where these devices are widely used. The vulnerabilities highlight ongoing issues with firmware security in consumer-grade routers, where inadequate input validation allows for such exploits.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-11-01
CVE-2026-120195 and CVE-2026-120196 published
NVD classified two critical vulnerabilities in WAVLINK routers, enabling remote command execution without authentication.
Ciberseguridadlatam
2026-11-01
Public exploit code released
Code for exploiting both vulnerabilities began circulating publicly shortly after disclosure, raising immediate security concerns.
Ciberseguridadlatam

More articles in this cluster (2)

Following this threat?

Track CVE-2026-120195 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (13)

1 / 4

Common questions

Which WAVLINK router models are affected?
The vulnerabilities affect the WL-WN579A3-A and WN579X3-D models.
Is there a patch available for these vulnerabilities?
No, as of now, WAVLINK has not released any patches for these vulnerabilities.
What should users do to protect their devices?
Users should monitor for updates from WAVLINK and consider disabling remote management features until a patch is available.