Wl Wn530Be1 A
Approved changes feed: RSS · Atom
cpe:2.3:a:wavlink:wl-wn530be1-a:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Wavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d) |
|---|---|
| Product | Wl Wn530Be1 A (5ac5130d-5854-5aa2-a2cb-a1916417bb8b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-109108 |
vulnerable | 2026-11-03 10:17:40.159270 |
Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection
CRITICAL (9.9)
A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Published: 2026-10-13T07:30:21.992Z
Updated: 2026-10-16T21:38:50.808Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-113802 |
vulnerable | 2026-11-03 10:16:27.400871 |
Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler
CRITICAL (9.8)
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen(). A remote unauthenticated attacker can send a forged IP-FROM: 127.0.0.1 header to bypass login and execute arbitrary commands as root.
Published: 2026-10-20T17:59:55.407Z
Updated: 2026-10-21T15:53:04.180Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.