OS Command Injection in WAVLINK WN579X3-D Router
Article Content
- •CVE-2026-120196 allows OS command injection on WAVLINK WN579X3-D routers.
- •Exploitation can lead to full device compromise by authenticated attackers.
- •Users are advised to update firmware and restrict access immediately.
A vulnerability, CVE-2026-120196, has been identified in the WAVLINK WN579X3-D router's port_forward function, allowing remote command injection via the Name parameter in /cgi-bin/wapi.cgi. This flaw affects firmware version V250402 and can lead to full device compromise if exploited by an authenticated attacker. The vulnerability is marked with a CVSS score of 9.4, indicating its nature. Exploitation is possible due to inadequate input validation, which allows attackers to bypass security checks. The vendor has been informed, and users are urged to update their firmware and restrict access to the affected function. Public proof-of-concept exploits have emerged, increasing the urgency for remediation. Monitoring for suspicious activity is also recommended.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (6)
Following this threat?
Track CVE-2026-120196 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Which firmware versions are affected?
What are the risks of this vulnerability?
What immediate actions should be taken?
Continue Reading
Critical RCE Vulnerability in Langflow Exposed CVE-2026-105740 is a critical remote code execution (RCE) vulnerability affecting Langflow versions prior to 1.9.0. Authenticated users can exploit this flaw by adding an MCP server with the 'Stdio' transport, allowing arbitrary OS commands to be executed without validation. The vulnerability was published on October…