CVE-2026-109107 | Wavlink WL-WN592AX6 250422 /cgi-bin/upload.cgi main Cookie null pointer dereference

October 12, 2026 Yanac

A vulnerability was found in Wavlink WL-WN592AX6 250422. It has been rated as critical. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference.

This vulnerability is tracked as CVE-2026-109107. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More