Which versions of Wl Wn578w2 are affected by CVE-2026-4543?

Organizations using A vulnerability should be aware of moderate risk from CVE-2026-4543, a command injection vulnerability rated CVSS 6.3.

Is there a public PoC exploit available for CVE-2026-4543?

Yes, a public proof-of-concept exploit is available for CVE-2026-4543. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2026-4543?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Validate input sanitization for user-controlled parameters.

Wl Wn578w2 CVE-2026-4543

Q: What is the CVSS score of CVE-2026-4543?

CVE-2026-4543 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.2%.

EUVD-2026-14295 LOW

Command Injection (CWE-77)

2026-03-22 VulDB

GHSA-xvp7-mx9h-8g48

Command Injection Wl Wn578w2 Wavlink

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

6.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Mar 23, 2026 - 14:31 vuln.today

Public exploit code

EUVD ID Assigned

Mar 22, 2026 - 09:45 euvd

EUVD-2026-14295

Analysis Generated

Mar 22, 2026 - 09:45 vuln.today

CVE Published

Mar 22, 2026 - 09:23 nvd

MEDIUM 6.3

DescriptionCVE.org

A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Performing a manipulation of the argument dmz_flag/del_flag results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Wavlink WL-WN578W2 routers contain a command injection vulnerability in the /cgi-bin/firewall.cgi POST handler that allows authenticated attackers to execute arbitrary commands by manipulating the dmz_flag or del_flag parameters. The vulnerability is remotely exploitable and has public exploit code available, though no patch has been released. An attacker with network access and valid credentials could achieve code execution with the privileges of the web service.

Technical ContextAI

The vulnerability is a command injection flaw (CWE-77: Improper Neutralization of Special Elements used in a Command) in the firewall configuration CGI script of the Wavlink WL-WN578W2 router. The affected component is the POST request handler at /cgi-bin/firewall.cgi, which fails to properly sanitize user-supplied input in the dmz_flag and del_flag parameters before passing them to system commands. This allows attackers to break out of the intended command context and inject arbitrary shell commands that execute with the privileges of the web server process. The CPE identifier cpe:2.3:a:wavlink:wl-wn578w2 confirms this is specific to the WL-WN578W2 model, version 221110 and potentially other versions in this product line.

RemediationAI

No official firmware patch has been released from Wavlink. Users should immediately change the default administrative credentials on the device to a strong, unique password and restrict web interface access to trusted IP addresses only via firewall rules on the upstream network. Consider disabling remote management features and implementing network segmentation to isolate the router from critical systems. Monitor for suspicious firewall.cgi requests in access logs. For environments requiring higher security, consider replacing the Wavlink WL-WN578W2 with an alternative device from a vendor with active security response, or implement a secondary security appliance upstream of the router. Reference the public vulnerability disclosure at https://vuldb.com/?id.352360 and GitHub proof-of-concept at https://github.com/Litengzheng/vul_db/blob/main/WL-WN578W2/vul_5/README.md for technical details.