CVE-2026-120196
Received Received - Intake

OS Command Injection in WAVLINK WN579X3-D Firmware

Publication date: 2026-11-01

Last updated on: 2026-11-01

Assigner: VulDB

Description
A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-01
Last Modified
2026-11-01
Generated
2026-11-01
AI Q&A
2026-11-01
EPSS Evaluated
N/A
NVD
CVE-2026-120196
EUVD
EUVD-2026-114768

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
WAVLINK WN579X3-D V250402

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authenticated command injection flaw in the WAVLINK WN579X3-D router firmware version M79X3D.V250402. It exists in the port_forward function of the /cgi-bin/wapi.cgi endpoint. An attacker with valid credentials can inject arbitrary shell commands through the Name parameter, leading to remote code execution with root privileges due to weak input validation.

Detection Guidance

To detect this vulnerability, check if your WAVLINK WN579X3-D router is running firmware version M79X3D.V250402. Inspect network traffic for HTTP POST requests to /cgi-bin/wapi.cgi with parameters targeting the port_forward function. Look for unusual command injection attempts in the Name parameter.

Impact Analysis

An attacker could gain full control of the affected router, execute arbitrary commands, and potentially compromise the entire network. This includes accessing sensitive data, installing malware, or using the device as a pivot point for further attacks.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA compliance. Organizations may face legal penalties, data breach notifications, and reputational damage if exploited.

Mitigation Strategies

Immediately update the router firmware to a patched version. Disable remote administration features if not required. Restrict access to the admin interface via IP whitelisting. Monitor network traffic for suspicious activity targeting /cgi-bin/wapi.cgi.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120196. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart