CVE-2026-4164 — AI Deep Analysis Summary

🚨 **Essence**: Critical Command Injection in Wavlink WL-WN578W2. 💥 **Consequences**: Full device compromise.…

🛡️ **Root Cause**: CWE-77 (Command Injection). 🐛 **Flaw**: Improper parameter handling in `/cgi-bin/wireless.cgi`.…

📦 **Affected Product**: Wavlink WL-WN578W2 Wireless Repeater. 📅 **Specific Version**: Firmware V221110. ⚠️ **Vendor**: Wavlink (China Ruiyin).

👑 **Privileges**: Root/System level access. 📂 **Data**: Full read/write access to device files, network configuration, and potentially connected client data. 🌐 **Impact**: High (C) / High (I) / High (A) per CVSS 3.1.

🔓 **Threshold**: LOW. 🚫 **Auth**: No authentication required (PR:N). 🌍 **Access**: Network accessible (AV:N). 🖱️ **UI**: No user interaction needed (UI:N). This is a remote, unauthenticated attack vector.

📜 **Public Exp**: Yes. 📂 **Source**: GitHub repository `Litengzheng/vul_db` contains proof-of-concept code. 📢 **Advisories**: Multiple third-party submissions on VulDB confirm active exploitation potential.

🔍 **Self-Check**: Scan for open HTTP ports on Wavlink devices. 📡 **Target**: Send crafted POST requests to `/cgi-bin/wireless.cgi` with malicious payloads in `GuestWifi` or `SetName` parameters.…

🛠️ **Official Patch**: Not explicitly listed in the provided data. 📝 **Status**: Vulnerability published March 2026. ⚠️ **Note**: Check vendor website for firmware updates > V221110.…

🚧 **Workaround**: Block external access to the device's web management interface (port 80/443). 🛑 **Restrict**: Disable remote management features.…

🔥 **Urgency**: CRITICAL. 🚨 **Priority**: Immediate action required. With CVSS 9.8 (implied by H/H/H) and no auth needed, this is a high-risk, easy-to-exploit vulnerability. Patch or isolate immediately.