CVE-2026-109107Medium· 6.5▾ SunlitA weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible t…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-11017Low· 3.3A vulnerability was detected in OGRECave Ogre up to 14.4.1
CVE-2025-11550Medium· 6.5A vulnerability was found in Tenda W12 3.0.0.6(3948)
CVE-2026-78148Medium· 5.3A vulnerability was determined in ggml-org llama.cpp bec4772f6
CVE-2025-10823Low· 3.3A vulnerability was found in axboe fio up to 3.41
CVE-2023-4459Medium· 5.5A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel
CVE-2025-15156Medium· 4.3A flaw has been found in omec-project UPF up to 2.1.3-dev