{"id":"CVE-2026-120195","published":"2026-11-01T04:18:46.687","lastModified":"2026-11-01T04:18:46.687","description":"A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.","cvssScore":10,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":["CWE-77","CWE-78"],"vendors":[],"products":[],"references":[{"url":"https://github.com/pipiyyb/cve/blob/main/WAVLINK_WN579A3_CVE_wzdgwMesh_wlan_ssid.md","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-120195","tags":[]},{"url":"https://vuldb.com/submit/914922","tags":[]},{"url":"https://vuldb.com/vuln/429558","tags":[]},{"url":"https://vuldb.com/vuln/429558/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/pipiyyb/cve/blob/main/WAVLINK_WN579A3_CVE_wzdgwMesh_wlan_ssid.md","tags":[]}],"hasPoc":true,"ai":{"summary":"A command injection flaw in WAVLINK WL-WN579A3-A firmware allows unauthenticated remote attackers to execute arbitrary OS commands via the wlan_ssid parameter in the set_wzdgwMesh function of /cgi-bin/adm.cgi, leading to full system compromise.","exploitability":"Trivial to exploit remotely with no authentication or user interaction required; public exploit code exists.","blast_radius":"Complete device takeover enabling data exfiltration, lateral movement, and persistent backdoor deployment across the network.","remediation":"Upgrade to firmware version 2026-04-15-xxxxxxx (or later) if available; otherwise, disable the Initial Setup Wizard feature and restrict access to /cgi-bin/adm.cgi via firewall rules until patched.","detection":"Unusual outbound connections from the device to external IPs on non-standard ports, or unexpected execution of shell commands logged in system logs (e.g., /var/log/messages or dmesg) containing strings like 'sh', 'bash', or 'nc'.","tags":["command-injection","rce","web-interface","firmware","no-auth"],"model":"garnet-coder","analyzedAt":"2026-11-01T09:45:32.054Z"}}