CVE-2026-110958

Name of the Vulnerable Software and Affected Versions Wavlink WN530HG4B M30HG4B V260724

Description A heap-based buffer overflow exists in the api.cgi file. This issue allows a remote attacker to trigger the overflow via an unknown function. The vendor noted that the api=info&client=app handler previously constructed shell commands using system(), whereas the fix involves using execvp() and implementing length limits and null-checks for the client address.

Recommendations Upgrade to version 2026-09-24-841a51c6d5 tclinux.bin.