CVE-2026-120197

A flaw in the WAVLINK WL-WN530HG4B M_V260724 allows for OS command injection due to improper neutralization of special elements. The vulnerability exists in the port_forward function within the /cgi-bin/wapi.cgi file, specifically when the Name argument is manipulated. This issue can be triggered...

CVE-2026-120196

A vulnerability exists in the WAVLINK WN579X3-D (firmware V250402 ) device. The port_forward function within the /cgi-bin/wapi.cgi file is susceptible to OS command injection when the Name argument is manipulated. This vulnerability can be exploited remotely . An exploit is currently publicly ava...