GCVE - cpe:2.3:h:wavlink:wl-wn578w2:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:wavlink:wl-wn578w2:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Wavlink (`b3b0198b-0ff8-5498-8769-561cf3fe0e3d`)
Product	Wl Wn578W2 (`e3dae8fe-5a94-5831-be06-01a9b59147b8`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-4544`	not_vulnerable	2026-06-08 08:05:13.510656	Wavlink WL-WN578W2 POST Request login.cgi cross site scripting LOW (2.4) A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-22T09:58:12.417Z Updated: 2026-03-23T16:07:56.364Z Open on db.gcve.eu Reference links https://vuldb.com/?id.352361 https://vuldb.com/?ctiid.352361 https://vuldb.com/?submit.774692 https://vuldb.com/?submit.774693 https://vuldb.com/?submit.774696	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4543`	not_vulnerable	2026-06-08 08:05:13.509882	Wavlink WL-WN578W2 POST Request firewall.cgi command injection MEDIUM (6.3) A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Performing a manipulation of the argument dmz_flag/del_flag results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-22T09:23:28.522Z Updated: 2026-03-23T16:22:35.195Z Open on db.gcve.eu Reference links https://vuldb.com/?id.352360 https://vuldb.com/?ctiid.352360 https://vuldb.com/?submit.774690 https://vuldb.com/?submit.774691 https://github.com/Litengzheng/vul_db/blob/main/WL-WN578W2/vul_4/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10359`	not_vulnerable	2026-06-08 07:02:26.742303	Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injection HIGH (7.3) A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T13:02:05.356Z Updated: 2025-09-15T15:36:15.362Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323773 https://vuldb.com/?ctiid.323773 https://vuldb.com/?submit.643444 https://github.com/ZZ2266/.github.io/blob/main/WAVLINK/WL-WN578W2/wireless.cgi/add_mac/ https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/add_mac#proof-of-concept-poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10358`	not_vulnerable	2026-06-08 07:02:26.741734	Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection HIGH (7.3) A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-13T08:02:06.212Z Updated: 2025-09-15T15:47:54.244Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323772 https://vuldb.com/?ctiid.323772 https://vuldb.com/?submit.643438 https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac https://github.com/ZZ2266/.github.io/tree/main/WAVLINK/WL-WN578W2/wireless.cgi/DeleteMac#proof-of-concept-poc	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10325`	not_vulnerable	2026-06-08 07:02:26.713146	Wavlink WL-WN578W2 login.cgi sub_401BA4 command injection MEDIUM (6.3) A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2025-09-12T20:02:05.804Z Updated: 2025-09-12T20:25:31.094Z Open on db.gcve.eu Reference links https://vuldb.com/?id.323751 https://vuldb.com/?ctiid.323751 https://vuldb.com/?submit.643436 https://vuldb.com/?submit.643437 https://github.com/ZZ2266/.github.io/blob/main/WAVLINK/WL-WN578W2/login.cgi/login/readme.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10324`	not_vulnerable	2026-06-08 07:02:26.712625	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10323`	not_vulnerable	2026-06-08 07:02:26.711879	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10322`	not_vulnerable	2026-06-08 07:02:26.711070	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-10321`	not_vulnerable	2026-06-08 07:02:26.710540	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.