CVE-2026-120196 | WAVLINK WN579X3-D V250402 /cgi-bin/wapi.cgi port_forward name os command injection

October 31, 2026 Yanac

A vulnerability labeled as very critical has been found in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection.

This vulnerability was named CVE-2026-120196. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More