CRITICALCVSS v3.1 9.9Vulnerability

CVE-2026-120197

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.

Properties

Severity: CRITICAL
Nvd fetched at: 2026-11-01T04:23:23.117307+00:00
Cvss score: 9.9
Cvss severity: CRITICAL
Retrieved at: 2026-11-01T04:27:23+00:00
Score: 9.9
Last source: NVD
Cvss version: 3.1
Cve id: CVE-2026-120197
Cvss vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
First seen by Signal: 2026-11-01T04:27:23+00:00
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published at: 2026-11-01T04:18:47.147
Last modified: 2026-11-01T04:18:47.147

Related Entities (2)

HAS_WEAKNESS (2)

→[Weakness]Improper Neutralization of Special Elements used in a Command ('Command Injection')

→[Weakness]Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Explore deeper with Ninja Signal's threat intelligence graph

Search in Spektr Open Signal Desktop