{"metadata": {"vulnerability": "CVE-2026-110958", "count": 20, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-110958", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-15T02:00:00Z", "date_only": false, "value": "2026-10-15T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-110958", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-15T09:30:59.165Z", "date_only": false, "value": "2026-10-15T09:30:59.165Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-110958", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-15T11:36:12Z", "date_only": false, "value": "2026-10-15T11:36:12.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "CVE-2026-110958", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-15T15:30:18.031Z", "date_only": false, "value": "2026-10-15T15:30:18.031Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-110958", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-15T15:30:18.031Z", "date_only": false, "value": "2026-10-15T15:30:18.031Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "CVE-2026-110958", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T15:38:47.922Z", "date_only": false, "value": "2026-10-15T15:38:47.922378Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117445671482010826", "record": "CVE-2026-110958", "field": "creation_timestamp", "uuid": "4a5f56f5-f607-465e-b534-0bfec8a27109", "content": "CVE-2026-110958 Wavlink WN530HG4B api.cgi heap-based overflow A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026-09-24-841a51c6d5_tclinux.bin is sufficient to resolve this issue. The affected component should be upgraded. The vendor confirms: \"We confirm the finding, and it has already been addressed. In the current firmware the api=info&client=app handler no longer builds a shell command: the login script is now invoked through an argument vector (execvp) instead of system(), and the client address is length-limited and null-checked.\"\nhttps://www.cve.org/CVERecord?id=CVE-2026-110958https://vuldb.com/vuln/420571https://vuldb.com/vuln/420571/ctihttps://vuldb.com/cve/CVE-2026-110958https://vuldb.com/submit/933388https://drive.google.com/file/d/12OOh8g9YDCbD-Q4cc52J6TH9KuOoD44A/view?usp=drive_linkhttps://dl.wavlink.com/firmware/RD/WN530BE2_WAVLINK-WO-2026-09-24-841a51c6d5_tclinux.bin#wavlink #Wavlink #WN530HG4B#CVE_2026_110958#bot", "url": "https://infosec.exchange/users/cve/statuses/117445671482010826"}, {"timestamp": "2026-10-15T16:17:48Z", "date_only": false, "value": "2026-10-15T16:17:48Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-456R-R3M7-3F5F", "record": "GHSA-456R-R3M7-3F5F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-15T16:17:48.467Z", "date_only": false, "value": "2026-10-15T16:17:48.467", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110958", "record": "FKIE_CVE-2026-110958", "field": "published"}, {"timestamp": "2026-10-15T16:32:48.081Z", "date_only": false, "value": "2026-10-15T16:32:48.081927Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxwigkfqnz4e", "record": "CVE-2026-110958", "field": "creation_timestamp", "uuid": "86ce0d66-f7ea-4eb6-a569-f9b6296a3012", "content": "CVE Radar | CVE-2026-110958 | CVSS 10.0\n\nCritical Wavlink api.cgi Buffer Overflow\n\nCVE-2026-110958 affects Wavlink WN530HG4B with firmware M30HG4B_V260724.\n\nFull analysis: https://t.me/aiutocomputerhelp_lab/1276", "url": "https://bsky.app/profile/aiuto-ch.bsky.social/post/3mxwigkfqnz4e"}, {"timestamp": "2026-10-15T16:56:01.583Z", "date_only": false, "value": "2026-10-15T16:56:01.583518Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mxwjq46esg2t", "record": "CVE-2026-110958", "field": "creation_timestamp", "uuid": "c3b4028b-91b1-45da-9e75-992b32907f13", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-110958: Wavlink WN530HG4B api.cgi heap-based overflow\nCVSS 10\nhttps://beta.vulnsea.com/cve/CVE-2026-110958\n\n#CVE #infosec #cybersecurity #threatintel", "url": "https://bsky.app/profile/vulnsea.com/post/3mxwjq46esg2t"}, {"timestamp": "2026-10-15T18:07:49.035Z", "date_only": false, "value": "2026-10-15T18:07:49.035923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxwnqhxgfm2x", "record": "CVE-2026-110958", "field": "creation_timestamp", "uuid": "7ef03cd3-ffba-4ea9-9665-f3154904f3f4", "content": "\ud83d\udea8 CVE-2026-110958 \u2014 CVSS 9.3 CRITICAL\n\nA vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-110958\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mxwnqhxgfm2x"}, {"timestamp": "2026-10-15T18:32:37Z", "date_only": false, "value": "2026-10-15T18:32:37Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-456R-R3M7-3F5F", "record": "GHSA-456R-R3M7-3F5F", "field": "published"}, {"timestamp": "2026-10-15T18:32:37Z", "date_only": false, "value": "2026-10-15T18:32:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-456R-R3M7-3F5F", "record": "GHSA-456R-R3M7-3F5F", "field": "modified"}, {"timestamp": "2026-10-15T18:34:10.216Z", "date_only": false, "value": "2026-10-15T18:34:10.216285Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110958", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T18:34:10.216Z", "date_only": false, "value": "2026-10-15T18:34:10.216285Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110958", "record": "FKIE_CVE-2026-110958", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-15T18:34:20.350Z", "date_only": false, "value": "2026-10-15T18:34:20.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-110958", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:34:20.350Z", "date_only": false, "value": "2026-10-15T18:34:20.350Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-110958", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-15T18:40:06.269Z", "date_only": false, "value": "2026-10-15T18:40:06.269790Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwpk7hkop2l", "record": "CVE-2026-110958", "field": "creation_timestamp", "uuid": "5bf696d0-1cf8-4ca4-86f9-fda6c28d7744", "content": "CVE-2026-110958 - wn530hg4b\nThe firmware on the Wavlink WN530HG4B router contains a flaw in the api.cgi component that can be triggered over the network, potentially letting an attacker run code on the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wn530hg4b #wavlink #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mxwpk7hkop2l"}, {"timestamp": "2026-10-15T19:56:13.350Z", "date_only": false, "value": "2026-10-15T19:56:13.350", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-110958", "record": "FKIE_CVE-2026-110958", "field": "lastModified"}]}