CVE-2026-109109

Summary

A stack-based buffer overflow vulnerability exists in the Wavlink WL-WN530BE1-A router's Settings Export CGI component, allowing remote attackers to execute arbitrary code through a manipulated HTTP_COOKIE or X-Cmd parameter. This critical flaw can lead to complete system compromise.

Exploitability

The exploit is highly practical with no special preconditions required, as it allows remote code execution through standard HTTP headers with a public exploit already available.

Blast radius

The vulnerability affects all Wavlink routers with the specific model and firmware version, potentially enabling widespread remote system compromise across affected deployments.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 2.590 or later immediately, as this is the first fixed version identified in the vendor's advisory for the affected device model.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.