CVE-2026-4164 | Wavlink WL-WN578W2 221110 POST Request /cgi-bin/wireless.cgi Delete_Mac_list/SetName/GuestWifi command injection

A vulnerability was found in Wavlink WL-WN578W2 221110. It has been declared as critical. Impacted is the function Delete_Mac_list/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Executing a manipulation can lead to command injection.

This vulnerability is registered as CVE-2026-4164. It is possible to launch the attack remotely. Furthermore, an exploit is available.

It is recommended to upgrade the affected component.