Critical severity10.0NVD Advisory· Published Oct 13, 2026

CVE-2026-109110

Description

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.

Affected products

Wavlink/WL-WN592AX6llm-fuzzy
Range: 250422

Patches

Vulnerability mechanics

References

drive.google.com/file/d/1KtZZ7kjVswRgP2VLEx7M7gEafyY8Wp2Q/viewnvd
vuldb.com/cve/CVE-2026-109110nvd
vuldb.com/submit/913573nvd
vuldb.com/vuln/416861nvd
vuldb.com/vuln/416861/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.650
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000