Threats tagged 'ghsa-3wx6-ffgj-fwjg'

A critical remote code execution vulnerability exists in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The flaw is in the set_wzdgwMesh function of /cgi-bin/adm.cgi within the Initial Setup Wizard component, where improper handling of the wlan_ssid argument allows OS command injection. Public exploit code is available, and the vulnerability has a maximum CVSS score of 10. No patch or remediation information is currently provided.