CVE-2026-110958: Heap-based Buffer Overflow in Wavlink WN530HG4B
Description
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms: "We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked."
CVSS v4.0
Score 10.0critical
Affected software
Wavlink
WN530HG4B
cpe:2.3:a:wavlink:wn530hg4b:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in an unknown function within the api.cgi file of the Wavlink WN530HG4B router firmware (M30HG4B_V260724). The issue is a heap-based buffer overflow caused by unsafe construction of shell commands in the login script handler (api=info&client=app). The vulnerability can be exploited remotely without authentication. The vendor fixed the issue by replacing system() calls with execvp and adding input length restrictions and null checks. The fix is included in firmware version 2026-09-24-841a51c6d5_tclinux.bin.
Potential Impact
Successful exploitation allows remote attackers to cause a heap-based buffer overflow, which can lead to arbitrary code execution or denial of service on the affected device. Given the CVSS 4.0 score of 10 and the vector indicating no required privileges or user interaction, this is a critical remote code execution vulnerability.
Mitigation Recommendations
Upgrade the Wavlink WN530HG4B device firmware to version 2026-09-24-841a51c6d5_tclinux.bin or later. The vendor confirms this update fully addresses the vulnerability by changing the command execution method and adding input validation. No other mitigation steps are necessary once the firmware is updated.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-10-15T09:30:59.165Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad0f5fd2cdf04f65641fe0a
Added to database: 10/15/2026, 15:49:17 UTC
Last enriched: 10/15/2026, 16:04:06 UTC
Last updated: 10/15/2026, 19:04:20 UTC
Views: 12
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.