{"id":"CVE-2026-109110","published":"2026-10-13T09:17:15.370","lastModified":"2026-10-15T16:17:43.243","description":"A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-77","CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://drive.google.com/file/d/1KtZZ7kjVswRgP2VLEx7M7gEafyY8Wp2Q/view?usp=drive_link","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-109110","tags":[]},{"url":"https://vuldb.com/submit/913573","tags":[]},{"url":"https://vuldb.com/vuln/416861","tags":[]},{"url":"https://vuldb.com/vuln/416861/cti","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A remote OS command injection vulnerability exists in Wavlink WL-WN592AX6 access point firmware, allowing attackers to execute arbitrary commands on the device through the wmapd daemon's system function. This critical flaw enables full device compromise without requiring authentication.","exploitability":"The exploit is highly practical with no authentication required, leveraging remote network access to trigger command injection in the wmapd daemon's system function.","blast_radius":"Exploitation could lead to complete device takeover, enabling attackers to execute arbitrary commands, potentially allowing lateral movement and persistent access to the affected wireless network infrastructure.","remediation":"Upgrade to firmware version 250422 or later, as this is the specific fixed version mentioned in the vulnerability description.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","wireless","network","ics"],"model":"garnet-coder","analyzedAt":"2026-10-14T08:43:57.049Z"}}