CVE-2026-109108 | Wavlink WL-WN530BE1-A 251117 /cgi-bin/uploadVpn.cgi popen type os command injection

October 12, 2026 Yanac

A vulnerability categorized as very critical has been discovered in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection.

This vulnerability is listed as CVE-2026-109108. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More