Description


A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Related CPE's


Could not find any relations

Weaknesses



CWE-404CWE-476

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

6.5 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-13T08:16:59.680Z

6 hours ago

Last modified

2026-10-13T14:17:25.117Z

37 minutes ago