Medium severity · published Oct 13, 2026
CVE-2026-109107
Wavlink WL-WN592AX6 upload.cgi main null pointer dereference
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WL
WL-WN592AX6 · Wavlink
250422 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-109107
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-109107
vdb-entry
https://vuldb.com/vuln/416858
signature
https://vuldb.com/vuln/416858/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-109107
third-party-advisory
https://vuldb.com/submit/907371
More from WL-WN592AX6
10.0
CVE-2026-109110
Wavlink WL-WN592AX6 wmapd system os command injection