CVE-2026-110958

Summary

A heap-based buffer overflow in the Wavlink WN530HG4B M30HG4B_V260724 router's api.cgi file allows remote attackers to execute arbitrary code with high privileges. This vulnerability stems from improper memory handling in an unknown function within the API handler.

Exploitability

Exploitation is highly likely and requires no special preconditions, as the vulnerability is remotely accessible and has a public exploit available.

Blast radius

The impact could be severe across all affected Wavlink routers, potentially allowing attackers to gain full control of the device and use it as a pivot point for network infiltration.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to firmware version 2026-09-24-841a51c6d5_tclinux.bin immediately to resolve this critical heap overflow vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.