CVE-2026-7691: Command Injection in Wavlink WL-WN570HA1
CVE-2026-7691 is a command injection vulnerability in the Wavlink WL-WN570HA1 router firmware version R70HA1 V1410_221110. The flaw exists in the set_sys_cmd function within /cgi-bin/adm.cgi, allowing remote attackers to manipulate command arguments and execute arbitrary commands. The affected firmware version has been removed from the vendor's website and is no longer supported. No official patch or remediation has been provided. The vulnerability has a medium severity rating with a CVSS score of 5.3. There is no evidence of exploitation in the wild at this time.
AI Analysis
Technical Summary
This vulnerability involves command injection in the set_sys_cmd function of the /cgi-bin/adm.cgi file in Wavlink WL-WN570HA1 firmware R70HA1 V1410_221110. Remote attackers can exploit this flaw by manipulating the command argument to execute arbitrary system commands. The affected firmware version has been withdrawn by the vendor and is no longer supported, with no official fix available. The CVSS 4.0 base score is 5.3, indicating medium severity. Exploits have been publicly disclosed but no known active exploitation has been reported.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially leading to unauthorized control or disruption. However, the impact is limited to devices running the unsupported firmware version R70HA1 V1410_221110, which the vendor has removed from distribution. There is no confirmed exploitation in the wild.
Mitigation Recommendations
The vendor has removed the vulnerable firmware version from their website and no longer supports it. No official patch or fix is available. Users should upgrade to a supported firmware version if available or replace the affected device to mitigate this vulnerability. Patch status is not confirmed; check with the vendor for any updated remediation guidance.
CVE-2026-7691: Command Injection in Wavlink WL-WN570HA1
Description
CVE-2026-7691 is a command injection vulnerability in the Wavlink WL-WN570HA1 router firmware version R70HA1 V1410_221110. The flaw exists in the set_sys_cmd function within /cgi-bin/adm.cgi, allowing remote attackers to manipulate command arguments and execute arbitrary commands. The affected firmware version has been removed from the vendor's website and is no longer supported. No official patch or remediation has been provided. The vulnerability has a medium severity rating with a CVSS score of 5.3. There is no evidence of exploitation in the wild at this time.
CVSS v4.0
Score 5.3medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves command injection in the set_sys_cmd function of the /cgi-bin/adm.cgi file in Wavlink WL-WN570HA1 firmware R70HA1 V1410_221110. Remote attackers can exploit this flaw by manipulating the command argument to execute arbitrary system commands. The affected firmware version has been withdrawn by the vendor and is no longer supported, with no official fix available. The CVSS 4.0 base score is 5.3, indicating medium severity. Exploits have been publicly disclosed but no known active exploitation has been reported.
Potential Impact
Successful exploitation allows remote attackers to execute arbitrary commands on the affected device, potentially leading to unauthorized control or disruption. However, the impact is limited to devices running the unsupported firmware version R70HA1 V1410_221110, which the vendor has removed from distribution. There is no confirmed exploitation in the wild.
Mitigation Recommendations
The vendor has removed the vulnerable firmware version from their website and no longer supports it. No official patch or fix is available. Users should upgrade to a supported firmware version if available or replace the affected device to mitigate this vulnerability. Patch status is not confirmed; check with the vendor for any updated remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-02T16:33:35.460Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 69f72528cbff5d8610ea622d
Added to database: 5/3/2026, 10:36:24 AM
Last enriched: 5/11/2026, 2:23:18 AM
Last updated: 6/17/2026, 4:01:31 PM
Views: 79
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.