{"id":"CVE-2026-109108","published":"2026-10-13T08:16:59.917","lastModified":"2026-10-16T22:17:18.117","description":"A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.","cvssScore":9.9,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-77","CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Rauzk/0a61823f0033441142dc1c3f4a776e7c","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-109108","tags":[]},{"url":"https://vuldb.com/submit/909182","tags":[]},{"url":"https://vuldb.com/vuln/416859","tags":[]},{"url":"https://vuldb.com/vuln/416859/cti","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Rauzk/0a61823f0033441142dc1c3f4a776e7c","tags":[]}],"hasPoc":true,"ai":{"summary":"A command injection vulnerability exists in Wavlink router firmware where user-supplied input to the 'Type' parameter in /cgi-bin/uploadVpn.cgi can be manipulated to execute arbitrary OS commands with high privileges. This allows attackers to gain full system control of the device.","exploitability":"Exploitation is straightforward and requires no special preconditions, as the vulnerability allows remote command injection through a web interface without authentication.","blast_radius":"If exploited, this vulnerability could allow attackers to fully compromise any affected Wavlink router, potentially enabling them to redirect traffic, install malware, or use the device as a pivot point for further network attacks.","remediation":"Upgrade to firmware version 2.530 or later, which contains the patched version of /cgi-bin/uploadVpn.cgi that resolves the command injection vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","router","command-injection"],"model":"garnet-coder","analyzedAt":"2026-10-13T08:47:06.612Z"}}