Mmastodon TechnologyCybersecurity first seen 6 d ago, last 6 d ago, peak #12

Critical 9.9 Command Injection Flaw Found in WAVLINK Router

Original: 🔴 CVE-2026-120197 - Critical (9.9) A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function po

A critical vulnerability, CVE-2026-120197, has been disclosed in the WAVLINK WL-WN530HG4B router running firmware M_V260724. The flaw sits in the port_forward function of /cgi-bin/wapi.cgi, where manipulating the Name argument allows remote OS command injection. With a CVSS score of 9.9, security observers are urging users to patch or isolate affected devices.

Why now: A newly disclosed critical vulnerability allowing remote command execution is a direct risk to home and small-network routers.

WAVLINKCVE-2026-120197WL-WN530HG4B

Open on mastodon →

Evidence

• 🔴 CVE-2026-120197 - Critical (9.9) A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely.… · thehackerwire

API: https://socialmediatrends-api.osmike.com/v1/trends/4464366