CVE-2026-58454 is a remote code execution vulnerability in JAIOTlink C492A-W6 Wi-Fi IP cameras running firmware 4.8.30.57701411. The flaw arises from improper control over code generation, enabling authenticated attackers to write malicious shell scripts to the writable persistent JFFS2 storage path. By invoking the authenticated HTTP config endpoint, the attacker can execute these scripts through popen(), achieving persistent remote code execution that remains effective after device reboots. The vulnerability requires authentication and has a CVSS 4.0 base score of 7.7, indicating high severity.

An authenticated attacker can achieve persistent remote code execution on the affected device, allowing arbitrary shell commands to be executed with the privileges of the vulnerable service. This compromises device integrity and persistence, potentially enabling full control over the camera and its network environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the device's authenticated interfaces to trusted users only and monitor for unauthorized access attempts. Consider isolating affected devices from critical network segments to limit potential impact.