EUVD-2026-102100

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2V250604. The affected element is the function sub12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTEADDR leads to os command injection. It is possible to initiate the attack...

CVE-2026-110957 Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2V250604. The affected element is the function sub12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTEADDR leads to os command injection. It is possible to initiate the attack...

CVE-2026-110957

The Wavlink WL-WN530BE2-A (up to firmware M30BE2_V250604 ) is vulnerable to OS command injection due to improper handling of the REMOTE_ADDR argument in the sub_12580 function of the api.cgi file within the Login Processing component. This flaw allows an unauthenticated attacker to execute arbitr...

CVE-2026-110957: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2V250604. The affected element is the function sub12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTEADDR leads to os command injection. It is possible to initiate the attack...