Threats tagged 'ghsa-jq5g-pp5w-q8h6'

A critical OS command injection vulnerability exists in the WAVLINK WL-WN530HG4B M_V260724 router, specifically in the port_forward function of /cgi-bin/wapi.cgi. This flaw allows remote attackers with low privileges to execute arbitrary OS commands by manipulating the Name argument. Exploit code has been published, increasing the risk of exploitation. No patch or remediation information is currently available.