CVE-2026-7690: Command Injection in Wavlink WL-WN570HA1
CVE-2026-7690 is a command injection vulnerability in the Wavlink WL-WN570HA1 router firmware version R70HA1 V1410_221110. The flaw exists in the set_sys_adm function of /cgi-bin/adm.cgi, where manipulation of the Username argument allows remote command injection. The affected firmware version has been removed from the vendor's website and is no longer supported. There is no official patch or remediation available. The vulnerability has a medium severity score of 5.3 and an exploit is publicly available, but no known active exploitation in the wild has been reported.
AI Analysis
Technical Summary
This vulnerability affects Wavlink WL-WN570HA1 routers running firmware R70HA1 V1410_221110. It arises from improper input handling in the set_sys_adm function within /cgi-bin/adm.cgi, enabling remote attackers to perform command injection via the Username parameter. The vendor has removed the vulnerable firmware version from distribution and no longer supports it. No official fix or patch has been provided. The CVSS 4.0 base score is 5.3, indicating a medium severity level. Although a public exploit exists, there is no evidence of widespread exploitation.
Potential Impact
Successful exploitation allows remote command injection on affected devices, potentially enabling attackers to execute arbitrary commands with limited privileges. This could lead to unauthorized control or disruption of the device. However, since the affected firmware is no longer supported and has been removed from the vendor's website, the impact is limited to devices still running this outdated version.
Mitigation Recommendations
No official patch or remediation is available as the vulnerable firmware version is no longer supported. The vendor has removed the affected firmware from their website. Users should upgrade to a supported and updated firmware version or replace the device with a currently supported model to mitigate this vulnerability.
CVE-2026-7690: Command Injection in Wavlink WL-WN570HA1
Description
CVE-2026-7690 is a command injection vulnerability in the Wavlink WL-WN570HA1 router firmware version R70HA1 V1410_221110. The flaw exists in the set_sys_adm function of /cgi-bin/adm.cgi, where manipulation of the Username argument allows remote command injection. The affected firmware version has been removed from the vendor's website and is no longer supported. There is no official patch or remediation available. The vulnerability has a medium severity score of 5.3 and an exploit is publicly available, but no known active exploitation in the wild has been reported.
CVSS v4.0
Score 5.3medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects Wavlink WL-WN570HA1 routers running firmware R70HA1 V1410_221110. It arises from improper input handling in the set_sys_adm function within /cgi-bin/adm.cgi, enabling remote attackers to perform command injection via the Username parameter. The vendor has removed the vulnerable firmware version from distribution and no longer supports it. No official fix or patch has been provided. The CVSS 4.0 base score is 5.3, indicating a medium severity level. Although a public exploit exists, there is no evidence of widespread exploitation.
Potential Impact
Successful exploitation allows remote command injection on affected devices, potentially enabling attackers to execute arbitrary commands with limited privileges. This could lead to unauthorized control or disruption of the device. However, since the affected firmware is no longer supported and has been removed from the vendor's website, the impact is limited to devices still running this outdated version.
Mitigation Recommendations
No official patch or remediation is available as the vulnerable firmware version is no longer supported. The vendor has removed the affected firmware from their website. Users should upgrade to a supported and updated firmware version or replace the device with a currently supported model to mitigate this vulnerability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-02T16:33:32.194Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69f7fc3acbff5d861094f637
Added to database: 5/4/2026, 1:54:02 AM
Last enriched: 5/11/2026, 2:18:14 AM
Last updated: 6/18/2026, 4:57:51 AM
Views: 102
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.