WL-WN579A3-a (2026-03-10-94f93d4) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/wl-wn579a3-a-2026-03-10-94f93d4/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 01 Nov 2026 04:44:47 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWAVLINK WL-WN579A3-A: Remote OS command injection (CVE-2026-120195)https://feed.craftedsignal.io/briefs/2026-11-wavlink-rce/Sun, 01 Nov 2026 04:44:47 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-wavlink-rce/A remote OS command injection vulnerability exists in the Initial Setup Wizard of WAVLINK WL-WN579A3-A firmware version 2026-03-10-94f93d4.A security vulnerability has been detected in WAVLINK WL-WN579A3-A firmware version 2026-03-10-94f93d4. The vulnerability is located in the set_wzdgwMesh function within /cgi-bin/adm.cgi of the Initial Setup Wizard. Manipulation of the wlan_ssid argument leads to OS command injection. This vulnerability can be exploited remotely. Public disclosure of the exploit has occurred. The vendor was contacted early regarding this disclosure.

Severity

CVSS v3.1 Base Score: 10.0

]]>criticaladvisory