CVE-2026-120195 | WAVLINK WL-WN579A3-A 2026-03-10-94f93d4 Initial Setup Wizard /cgi-bin/adm.cgi set_wzdgwMesh wlan_ssid os command injection

October 31, 2026 Yanac

A vulnerability identified as very critical has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssid leads to os command injection.

This vulnerability is uniquely identified as CVE-2026-120195. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More