CVE-2026-6483 Wavlink WL-WN530H4 internet.cgi snprintf os command injection
Remote attackers can execute arbitrary OS commands on Wavlink WL-WN530H4 routers via the internet.cgi interface, requiring a firmware upgrade.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-6483?
CVE-2026-6483 is a high-severity command injection vulnerability in Wavlink WL-WN530H4, published on 17 Apr 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026.04.16 is able to resolve this issue. Upgrading the affected component is recommended.
Which versions are affected by CVE-2026-6483?
How do I fix CVE-2026-6483?
No fix has been published for CVE-2026-6483 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-6483 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-6483 exists.
Sources
Also known as GHSA-7rfm-rcv9-66r2.