{"metadata": {"vulnerability": "CVE-2026-109109", "count": 21, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-12T00:00:00Z", "date_only": false, "value": "2026-10-12T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109109", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-12T02:00:00Z", "date_only": false, "value": "2026-10-12T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109109", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-12T08:32:57.687Z", "date_only": false, "value": "2026-10-12T08:32:57.687Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-109109", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-12T08:48:04.983Z", "date_only": false, "value": "2026-10-12T08:48:04.983631Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/vuldb/statuses/117427069556059115", "record": "CVE-2026-109109", "field": "creation_timestamp", "uuid": "44e9e5bf-041b-4c97-a405-655a228a4e7d", "content": "\u26a0\ufe0f We have just added an important vulnerability affecting Wavlink WL-WN530BE1-A (CVE-2026-109109) https://vuldb.com/vuln/416860", "url": "https://infosec.exchange/users/vuldb/statuses/117427069556059115"}, {"timestamp": "2026-10-12T10:38:15Z", "date_only": false, "value": "2026-10-12T10:38:15.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109109", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-13T07:45:17.295Z", "date_only": false, "value": "2026-10-13T07:45:17.295Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-109109", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T07:45:17.295Z", "date_only": false, "value": "2026-10-13T07:45:17.295Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-109109", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T08:03:14.526Z", "date_only": false, "value": "2026-10-13T08:03:14.526498Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432555538919293", "record": "CVE-2026-109109", "field": "creation_timestamp", "uuid": "63898fe2-f581-4e80-874a-420fee3c8e76", "content": "CVE-2026-109109 Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.\nhttps://www.cve.org/CVERecord?id=CVE-2026-109109https://vuldb.com/vuln/416860https://vuldb.com/vuln/416860/ctihttps://vuldb.com/cve/CVE-2026-109109https://vuldb.com/submit/909191https://gist.github.com/Rauzk/9ef4fe7574e5689386cc43139f4cf9e1#Wavlink #WL-WN530BE1-A#CVE_2026_109109#bot", "url": "https://infosec.exchange/users/cve/statuses/117432555538919293"}, {"timestamp": "2026-10-13T08:17:00Z", "date_only": false, "value": "2026-10-13T08:17:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6V7P-W7M8-6JFJ", "record": "GHSA-6V7P-W7M8-6JFJ", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T08:17:00.110Z", "date_only": false, "value": "2026-10-13T08:17:00.110", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109109", "record": "FKIE_CVE-2026-109109", "field": "published"}, {"timestamp": "2026-10-13T08:31:26.827Z", "date_only": false, "value": "2026-10-13T08:31:26.827701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxqmlwzytwaf", "record": "CVE-2026-109109", "field": "creation_timestamp", "uuid": "27cf54fb-b8e0-4f53-a165-fafb829dd473", "content": "CVE Radar | CVE-2026-109109 | CVSS 10.0\n\nCritical Wavlink Settings Export Overflow\n\nCVE-2026-109109 affects Wavlink WL-WN530BE1-A version 251117.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1251", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxqmlwzytwaf"}, {"timestamp": "2026-10-13T09:00:08.462Z", "date_only": false, "value": "2026-10-13T09:00:08.462931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqo7b2qnj2z", "record": "CVE-2026-109109", "field": "creation_timestamp", "uuid": "93cee989-4caa-4d0d-8f53-9df25efa4727", "content": "CVE-2026-109109\nThe router\u2019s settings export feature can be tricked into running malicious code when a specially crafted web request is sent. An attacker could take control of the device from anywhere on the internet. Install\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxqo7b2qnj2z"}, {"timestamp": "2026-10-13T09:20:43.655Z", "date_only": false, "value": "2026-10-13T09:20:43.655446Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxqpe4cte52h", "record": "CVE-2026-109109", "field": "creation_timestamp", "uuid": "54b3fecd-1a92-40b3-a6a6-163661223aaa", "content": "\ud83d\udd34 CVE-2026-109109 - Critical (10)\n\nA vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the func...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-109109/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "url": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxqpe4cte52h"}, {"timestamp": "2026-10-13T09:30:45Z", "date_only": false, "value": "2026-10-13T09:30:45Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6V7P-W7M8-6JFJ", "record": "GHSA-6V7P-W7M8-6JFJ", "field": "published"}, {"timestamp": "2026-10-13T09:30:45Z", "date_only": false, "value": "2026-10-13T09:30:45Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6V7P-W7M8-6JFJ", "record": "GHSA-6V7P-W7M8-6JFJ", "field": "modified"}, {"timestamp": "2026-10-13T10:07:12.074Z", "date_only": false, "value": "2026-10-13T10:07:12.074326Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqrxa427a2z", "record": "CVE-2026-109109", "field": "creation_timestamp", "uuid": "4e670742-1bde-4e0f-ab2c-3c8e3ebadaa2", "content": "\ud83d\udea8 CVE-2026-109109 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcp...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-109109\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxqrxa427a2z"}, {"timestamp": "2026-10-14T13:38:48.870Z", "date_only": false, "value": "2026-10-14T13:38:48.870463Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109109", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T13:38:48.870Z", "date_only": false, "value": "2026-10-14T13:38:48.870463Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109109", "record": "FKIE_CVE-2026-109109", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T13:39:21.755Z", "date_only": false, "value": "2026-10-14T13:39:21.755Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-109109", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T13:39:21.755Z", "date_only": false, "value": "2026-10-14T13:39:21.755Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-109109", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T14:17:36.663Z", "date_only": false, "value": "2026-10-14T14:17:36.663", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-109109", "record": "FKIE_CVE-2026-109109", "field": "lastModified"}]}