CVE-2026-120197 | WAVLINK WL-WN530HG4B M_V260724 /cgi-bin/wapi.cgi port_forward name os command injection

October 31, 2026 Yanac

A vulnerability marked as very critical has been reported in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection.

The identification of this vulnerability is CVE-2026-120197. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More