Approved changes feed: RSS · Atom

cpe:2.3:o:wavlink:wl-wn578w2_firmware:221110:*:*:*:*:*:*:*

part: o version: 221110 update: *

VendorWavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d)
ProductWl Wn578W2 Firmware (7f238fb3-a765-52d8-87af-bc1882390fbd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-4544 vulnerable 2026-06-08 08:05:13.510626 Wavlink WL-WN578W2 POST Request login.cgi cross site scripting
LOW (2.4)
A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-22T09:58:12.417Z
Updated: 2026-03-23T16:07:56.364Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-4543 vulnerable 2026-06-08 08:05:13.509166 Wavlink WL-WN578W2 POST Request firewall.cgi command injection
MEDIUM (6.3)
A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Performing a manipulation of the argument dmz_flag/del_flag results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-22T09:23:28.522Z
Updated: 2026-03-23T16:22:35.195Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.