A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. May 3, 2026 · NIST NVD

   Detected

   A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Once again the vendors acted very professional and co

2. Jun 17, 2026 · NIST NVD

   Updated

   A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Once again the vendors acted very professional and co

Affected

• cpe wavlink/wl-wn570ha1 firmwarer70ha1_v1410_221110

Sources

• CVE.orgVulnerability recordCVE-2026-7690

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-7690

  A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes command injection. It is possible to initiate the attack remotely. The exploit ha

  nvd.nist.gov

References

• Exploit · lavender-bicycle-a5a.notion.site
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com
• Permissions Required · vuldb.com