Yyjy

**Name of the Vulnerable Software and Affected Versions** Wavlink WL-WN530BE2-A versions prior to 2026-09-24-841a51c6d5 tclinux.bin **Description** An OS command injection flaw exists in the Login Processing component within the `sub 12580` function of the `api.cgi` file. A remote attacker can exploit this by manipulating the `REMOTE ADDR` argument to execute arbitrary operating system commands. **Recommendations** Upgrade to version 2026-09-24-841a51c6d5 tclinux.bin.