References https://nvd.nist.gov/vuln/detail/CVE-2020-12124 https://pentest-tools.com/vulnerabilities-exploits/wavlink-wn530h4-live-apicgi-command-injection_22444 https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce https://access.redhat.com/security/cve/cve-2020-12124 https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12124.yaml https://www.cve.org/CVERecord?id=CVE-2020-12124 https://stigward.medium.com/wavlink-command-injection-cve-2022-23900-51988f6f15df https://synergosconsultancy.co.uk/wavlink-wl-wn530h4-internet-cgi-rce/ https://www.sentinelone.com/vulnerability-database/cve-2026-6483/ https://blog.talosintelligence.com/slew-of-wavlink-vulnerabilities/
Related VulnerabilitiesPoCCVE-2026-19598: Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX RouterPoCCVE-2026-19900: LB-LINK Routers - Unauthenticated Command Injection9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-63732)PoCCVE-2026-46339: 9Router <= 0.4.36 - Unauthenticated RCEPoCCVE-2026-59801: 9Router - Unauthenticated LLM Provider API ExposurePoC9router-default-login: 9Router - Default Login9Router /api/cli-tools/cowork-settings 命令执行漏洞(CVE-2026-46339)9router /api/tunnel/tailscale-install 命令执行漏洞PoCCVE-2026-54236: vLLM <= 0.23.0 - Anthropic Router Heap Address Information LeakPoCBLINK Routers /goform/set_cmd 命令执行漏洞(CVE-2025-1609)BLINK routers /goform/set_hidessid_cfg 命令执行漏洞(CVE-2025-45985)Wavlink WL-WN578W2跨站脚本漏洞(CVE-2026-4544)Cisco Any Router and Switch 默认口令漏洞