Wl Wn578W2 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:wavlink:wl-wn578w2_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Wavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d) |
|---|---|
| Product | Wl Wn578W2 Firmware (7f238fb3-a765-52d8-87af-bc1882390fbd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-4544 |
vulnerable | 2026-06-08 08:05:13.510458 |
Wavlink WL-WN578W2 POST Request login.cgi cross site scripting
LOW (2.4)
A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-22T09:58:12.417Z
Updated: 2026-03-23T16:07:56.364Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4543 |
vulnerable | 2026-06-08 08:05:13.507841 |
Wavlink WL-WN578W2 POST Request firewall.cgi command injection
MEDIUM (6.3)
A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Performing a manipulation of the argument dmz_flag/del_flag results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-22T09:23:28.522Z
Updated: 2026-03-23T16:22:35.195Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-4164 |
vulnerable | 2026-06-08 08:05:12.722896 |
Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection
CRITICAL (9.8)
A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function Delete_Mac_list/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Executing a manipulation can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. It is recommended to upgrade the affected component.
Published: 2026-03-15T03:02:10.413Z
Updated: 2026-03-17T13:42:57.181Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.