{"id":"CVE-2026-110958","published":"2026-10-15T16:17:48.467","lastModified":"2026-10-15T19:56:13.350","description":"A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms: \"We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked.\"","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-119","CWE-122"],"vendors":[],"products":[],"references":[{"url":"https://dl.wavlink.com/firmware/RD/WN530BE2_WAVLINK-WO-2026-09-24-841a51c6d5_tclinux.bin","tags":[]},{"url":"https://drive.google.com/file/d/12OOh8g9YDCbD-Q4cc52J6TH9KuOoD44A/view?usp=drive_link","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-110958","tags":[]},{"url":"https://vuldb.com/submit/933388","tags":[]},{"url":"https://vuldb.com/vuln/420571","tags":[]},{"url":"https://vuldb.com/vuln/420571/cti","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A heap-based buffer overflow in the Wavlink WN530HG4B M30HG4B_V260724 router's api.cgi file allows remote attackers to execute arbitrary code with high privileges. This vulnerability stems from improper memory handling in an unknown function within the API handler.","exploitability":"Exploitation is highly likely and requires no special preconditions, as the vulnerability is remotely accessible and has a public exploit available.","blast_radius":"The impact could be severe across all affected Wavlink routers, potentially allowing attackers to gain full control of the device and use it as a pivot point for network infiltration.","remediation":"Upgrade to firmware version 2026-09-24-841a51c6d5_tclinux.bin immediately to resolve this critical heap overflow vulnerability.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","router","firmware","heap-overflow"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:43:44.952Z"}}