CVE-2026-4543

A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is an unknown function of the file /cgi-bin/firewall.cgi of the component POST Request Handler. Performing a manipulation of the argument dmz_flag/del_flag results in command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-77

• https://github.com/Litengzheng/vul_db/blob/main/WL-WN578W2/vul_4/README.mdExploit, Third Party Advisory
• https://github.com/Litengzheng/vul_db/blob/main/WL-WN578W2/vul_5/README.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.352360Permissions Required, VDB Entry
• https://vuldb.com/?id.352360Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.774690Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.774691Third Party Advisory, VDB Entry

Published

Mar 22, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45416Netty is a network application framework for development of …7.5
• CVE-2026-45417DataEase is an open source data visualization and analysis t…8.7
• CVE-2026-45418ClipBucket v5 is an open source video sharing platform. Prio…8.8
• CVE-2026-45419DataEase is an open source data visualization and analysis t…8.5
• CVE-2026-4542A vulnerability has been found in SSCMS 4.7.0. The affected …5.4
• CVE-2026-45426Exploitation requires the attacker to already be an authenti…3.1
• CVE-2026-45430The Salesforce module before 1.x-1.0.1 for Backdrop CMS does…7.1
• CVE-2026-45431This vulnerability exists in GX Earth ONT models due to impr…8.7
• CVE-2026-45432This vulnerability exists in GX Earth ONT models due to the …8.7
• CVE-2026-45433This vulnerability exists in GX Earth 2022 ONT models due to…8.7
• CVE-2026-45434Improper Authentication vulnerability in Apache OFBiz via Pa…9.8
• CVE-2026-45435Improper Neutralization of Input During Web Page Generation …6.5