High severity · published Apr 17, 2026
CVE-2026-6483
Wavlink WL-WN530H4 internet.cgi snprintf os command injection
7.2
CVSS
13.4%
EPSS
No
On KEV
Description
A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026.04.16 is able to resolve this issue. Upgrading the affected component is recommended.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)13.4% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WL
WL-WN530H4 · Wavlink
20220721 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-6483
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-6483
dl.wavlink.com
https://dl.wavlink.com/firmware/RD/root_uImage_WN530H4-A_2026.04.16.bin
github.com
https://github.com/dxz0069/WAVLINK-WN530H4-Command-Injection-in-set_add_routing/blob/main/vuldb_submission_report.md
vuldb.com
https://vuldb.com/submit/783055
vuldb.com
https://vuldb.com/vuln/358021
vuldb.com
https://vuldb.com/vuln/358021/cti
More from WL-WN530H4
9.8
CVE-2025-44868
Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter
7.5
CVE-2022-48165
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers to download configuration data and log…