CVE-2026-120197
Received Received - Intake

Command Injection in WAVLINK WL-WN530HG4B M_V260724

Publication date: 2026-11-01

Last updated on: 2026-11-01

Assigner: VulDB

Description
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-01
Last Modified
2026-11-01
Generated
2026-11-01
AI Q&A
2026-11-01
EPSS Evaluated
N/A
NVD
CVE-2026-120197
EUVD
EUVD-2026-114769

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
WAVLINK WL-WN530HG4B M_V260724

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-77 The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.
CWE-78 The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a command injection flaw in the WAVLINK WL-WN530HG4B router firmware version M_V260724. It exists in the port_forward function of the /cgi-bin/wapi.cgi file due to insufficient input validation. An attacker can inject arbitrary shell commands via the 'Name' parameter, which is executed with the privileges of the web service.

Detection Guidance

To detect this vulnerability, check if your WAVLINK WL-WN530HG4B router is running firmware version M_V260724. Inspect network traffic for POST requests to /cgi-bin/wapi.cgi with parameters targeting the port_forward function. Look for unusual commands or file creations in system logs.

Impact Analysis

This vulnerability allows an authenticated attacker to execute arbitrary commands on the device, potentially leading to full compromise of the router. Attackers could gain control over the device, steal sensitive data, or use it as a pivot point for further attacks within the network.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating privacy and security requirements under GDPR and HIPAA. Organizations using this vulnerable device may face compliance violations, data breaches, and potential legal consequences.

Mitigation Strategies

Immediately update the router firmware to a patched version if available. Disable remote administration features if not needed. Restrict access to the admin interface via IP whitelisting. Monitor network traffic for suspicious POST requests to /cgi-bin/wapi.cgi.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-120197. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart