CVE-2026-7692 - Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection

Back Back to CVE browser

MEDIUM

Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection

Published May 3, 2026

5.3

MEDIUM

CVSS 4.0

EPSS 4.39%

Description

A vulnerability was detected in Wavlink WL-WN570HA1 R70HA1 V1410_221110. The affected element is the function ping_ddns of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument DDNS results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. Once again the vendors acted very professional and confirms, "that the WN570HA1 firmware version R70HA1 V1410_221110 has been removed from our website." This vulnerability only affects products that are no longer supported by the maintainer.

Affected products

Vendor Wavlink Product WL-Wn570ha1 Default
n/a
- Version
  R70HA1 V1410_221110
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Wavlink

WL-Wn570ha1

n/a

Version	Status	Constraints
R70HA1 V1410_221110	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-74

CWE-77

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26831
Advisory
https://lavender-bicycle-a5a.notion.site/Wavlink-WN570HA1-ping_ddns-34753a41781f80c0a6c6c1b09b7cdf1c?source=copy_link
exploitThird Party Advisory
https://vuldb.com/submit/807807
third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/360862
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/360862/cti
signaturepermissions-requiredPermissions RequiredVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26831		Advisory
https://lavender-bicycle-a5a.notion.site/Wavlink-WN570HA1-ping_ddns-34753a41781f80c0a6c6c1b09b7cdf1c?source=copy_link		exploitThird Party Advisory
https://vuldb.com/submit/807807		third-party-advisoryThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/360862		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/vuln/360862/cti		signaturepermissions-requiredPermissions RequiredVDB Entry