PatchTheCVECVE-2026-4544: A vulnerability was determined in Wavlink WL-WN578W2 221110
CVE-2026-4544 is a low-severity flaw (CVSS 2.4) affecting wl-wn578w2 firmware. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in
Why this priority
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-4544?
wl-wn578w2 firmware: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2026-4544 being exploited?
CVE-2026-4544 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-4544 affect?
CVE-2026-4544 affects wl-wn578w2 firmware. Severity is low (CVSS 2.4). A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can le
How urgent is CVE-2026-4544?
Priority 18/100. Public exploit reference
Related CVEs
- CVE-2026-4543 MEDIUM 6.3 MITIGATE A vulnerability was found in Wavlink WL-WN578W2 221110