CVE-2026-4543— Wavlink WL-WN578W2 POST Request firewall.cgi command injection
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-4543
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Wavlink WL-WN578W2 POST Request firewall.cgi command injection
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Performing a manipulation of the argument dmz_flag/del_flag results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Wavlink WL-WN578W2 命令注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Wavlink WL-WN578W2是中国睿因（Wavlink）公司的一款无线中继器。 Wavlink WL-WN578W2 221110版本存在命令注入漏洞，该漏洞源于对POST请求处理组件中文件/cgi-bin/firewall.cgi的参数dmz_flag/del_flag的错误操作，可能导致命令注入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Wavlink | WL-WN578W2 | 221110 | cpe:2.3:o:wavlink:wl-wn578w2_firmware:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-4543
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-4543
Please Login to view more intelligence information
- Submit #774690: Wavlink WL-WN578W2 V221110 Command Injectionthird-party-advisory
- Submit #774691: Wavlink WL-WN578W2 V221110 Command Injectionthird-party-advisory
- CVE-2026-4543 Wavlink WL-WN578W2 POST Request firewall.cgi command injectionvdb-entrytechnical-description
- https://nvd.nist.gov/vuln/detail/CVE-2026-4543
IV. Related Vulnerabilities
Same product: WL-WN578W2
- CVE-2026-4544
Wavlink WL-WN578W2 POST Request login.cgi cross site scripti - CVE-2026-4164
Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi comma - CVE-2025-10359
Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command inject - CVE-2025-10358
Wavlink WL-WN578W2 wireless.cgi sub_404850 os command inject - CVE-2025-10325
Wavlink WL-WN578W2 login.cgi sub_401BA4 command injection
Same vendor: Wavlink
- CVE-2026-7692
Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection - CVE-2026-7691
Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection - CVE-2026-7690
Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection - CVE-2026-6559
Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting - CVE-2026-6483
Wavlink WL-WN530H4 internet.cgi snprintf os command injectio
Same weakness: CWE-77
- CVE-2026-42453
Termix: Command injection in extractArchive/compressFiles vi - CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test - CVE-2026-41500
electerm has Command Injection Vulnerability via runMac func - CVE-2026-41501
electerm has Command Injection Vulnerability via runLinux fu - CVE-2026-35428
Azure Cloud Shell Spoofing Vulnerability
V. Comments for CVE-2026-4543
No comments yet