A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipul…

Published:

16 april 2026 om 22:00:00

Alert date:

17 april 2026 om 12:00:44

Source:

nvd.nist.gov

Network Infrastructure, Mobile & IoT

A critical vulnerability (CVE-2026-6483) was discovered in Wavlink WL-WN530H4 router version 20220721. The vulnerability affects the strcat/snprintf functions in /cgi-bin/internet.cgi file, leading to OS command injection. The flaw can be exploited remotely and a public exploit is available. The vulnerability allows attackers to execute arbitrary commands on the affected device. Users are strongly recommended to upgrade to version 2026.04.16 which resolves this security issue.

Technical details

Mitigation steps:

Affected products:

Wavlink WL-WN530H4