Stack-Based Buffer Overflow in Wavlink WL-WN530BE1-A Router Settings Export CGI
CVE-2026-109109

10CRITICAL

Key Information:

Vendor

Wavlink

Status
Wl-wn530be1-a
Vendor
CVE Published:
13 October 2026

What is CVE-2026-109109?

A security flaw has been identified in the Wavlink WL-WN530BE1-A router, specifically within the ExportAllSettings.cgi component. This vulnerability allows for a stack-based buffer overflow when the HTTP_COOKIE/X-Cmd argument is manipulated. The remote exploitation of this vulnerability could enable an attacker to compromise the affected system. The vendor has been notified of the issue prior to its public disclosure, and the exploit is currently accessible, increasing the urgency for users to apply necessary mitigations.

Affected Version(s)

WL-WN530BE1-A 251117

References

https://vuldb.com/vuln/416860
vdb-entrytechnical-description
https://vuldb.com/vuln/416860/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-109109
third-party-advisory

CVSS V4

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tarbely (VulDB User)
VulDB CNA Team
.