📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
About FAQ Contact Us Terms of Service Privacy Policy 🌐 العربية
🔐

Welcome — Sign in or create an account for full access.

🔑 Sign In ✨ Register
🌐 العربية Sign In Create Account
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
↑↓ navigate ↵ open Ctrl+K search
CISO Consulting
Global phishing → Cross-sector HIGH 8m Global data_breach → Energy CRITICAL 1h Global phishing → Government/Multi-sector HIGH 2h Global apt → Education CRITICAL 4h Global vulnerability → Enterprise Software / ERP Systems CRITICAL 5h Global vulnerability → IT Infrastructure CRITICAL 6h Global vulnerability → Technology and Software Development HIGH 7h Global vulnerability → Enterprise IT and Government CRITICAL 7h Global ransomware → Multiple Sectors / Enterprise CRITICAL 7h Global general → Technology and Legal MEDIUM 8h Global phishing → Cross-sector HIGH 8m Global data_breach → Energy CRITICAL 1h Global phishing → Government/Multi-sector HIGH 2h Global apt → Education CRITICAL 4h Global vulnerability → Enterprise Software / ERP Systems CRITICAL 5h Global vulnerability → IT Infrastructure CRITICAL 6h Global vulnerability → Technology and Software Development HIGH 7h Global vulnerability → Enterprise IT and Government CRITICAL 7h Global ransomware → Multiple Sectors / Enterprise CRITICAL 7h Global general → Technology and Legal MEDIUM 8h Global phishing → Cross-sector HIGH 8m Global data_breach → Energy CRITICAL 1h Global phishing → Government/Multi-sector HIGH 2h Global apt → Education CRITICAL 4h Global vulnerability → Enterprise Software / ERP Systems CRITICAL 5h Global vulnerability → IT Infrastructure CRITICAL 6h Global vulnerability → Technology and Software Development HIGH 7h Global vulnerability → Enterprise IT and Government CRITICAL 7h Global ransomware → Multiple Sectors / Enterprise CRITICAL 7h Global general → Technology and Legal MEDIUM 8h
Vulnerabilities ›

CVE-2026-7690

Medium
CWE-74 — Weakness Type
Published: May 3, 2026  ·  Modified: May 6, 2026  ·  Source: NVD
CVSS v3
6.3
🔗 NVD Official
📄 Description (English)

A weakness has been identified in Wavlink WL-WN570HA1 R70HA1 V1410_221110. This issue affects the function set_sys_adm of the file /cgi-bin/adm.cgi. This manipulation of the argument Username causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. Once again the vendors acted very professional and confirms, "that the WN570HA1 firmware version R70HA1 V1410_221110 has been removed from our website." This vulnerability only affects products that are no longer supported by the maintainer.

🤖 AI Executive Summary

A command injection vulnerability exists in Wavlink WL-WN570HA1 router firmware version R70HA1 V1410_221110 through the Username parameter in /cgi-bin/adm.cgi. The vulnerability allows remote attackers to execute arbitrary commands on affected devices, though the firmware version is no longer supported.

📄 Description (Arabic)

تؤثر هذه الثغرة على أجهزة التوجيه Wavlink WL-WN570HA1 التي تعمل بإصدار البرنامج الثابت R70HA1 V1410_221110 وتسمح بحقن أوامر النظام عبر معامل اسم المستخدم. يمكن استغلال الثغرة عن بعد دون الحاجة إلى مصادقة، مما يسمح بتنفيذ أوامر تعسفية بامتيازات الجهاز.

🤖 ملخص تنفيذي (AI)

ثغرة حقن أوامر موجودة في جهاز التوجيه Wavlink WL-WN570HA1 إصدار البرنامج الثابت R70HA1 V1410_221110 عبر معامل اسم المستخدم في /cgi-bin/adm.cgi. تسمح الثغرة للمهاجمين البعيدين بتنفيذ أوامر تعسفية على الأجهزة المتأثرة، على الرغم من أن إصدار البرنامج الثابت لم يعد مدعوماً.

🤖 AI Intelligence Analysis Analyzed: May 18, 2026 13:50
🇸🇦 Saudi Arabia Impact Assessment
Saudi Relevance: medium
🏢 Affected Saudi Sectors
telecom government
🎯 MITRE ATT&CK Techniques
⚖️ Saudi Risk Score (AI)
6.0
/ 10.0
🔧 Remediation Steps (English)
Discontinue use of Wavlink WL-WN570HA1 firmware version R70HA1 V1410_221110 immediately. Replace affected devices with supported models or upgrade to current firmware versions if available. If continued use is necessary, isolate devices on restricted network segments and implement strict access controls to the administrative interface.
🔧 خطوات المعالجة (العربية)
توقف استخدام إصدار البرنامج الثابت Wavlink WL-WN570HA1 R70HA1 V1410_221110 فوراً. استبدل الأجهزة المتأثرة بنماذج مدعومة أو قم بالترقية إلى إصدارات البرنامج الثابت الحالية إن أمكن. إذا كان الاستخدام المستمر ضرورياً، فقم بعزل الأجهزة على قطاعات شبكة مقيدة وتطبيق ضوابط وصول صارمة على واجهة المسؤول.
📋 Regulatory Compliance Mapping
🟢 NCA ECC 2024
5.1 5.2 5.3
🔵 SAMA CSF
ID.AM-2 PR.DS-1 PR.IP-1
🟡 ISO 27001:2022
A.12.6.1 A.14.2.1 A.14.2.5
📊 CVSS Score
6.3
/ 10.0 — Medium
📊 CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack VectorN — None / Network
Attack ComplexityL — Low / Local
Privileges RequiredL — Low / Local
User InteractionN — None / Network
ScopeU — Unchanged
ConfidentialityL — Low / Local
IntegrityL — Low / Local
AvailabilityL — Low / Local
📋 Quick Facts
Severity Medium
CVSS Score6.3
CWECWE-74
EPSS0.33%
Exploit No
Patch ✗ No
Published 2026-05-03
Source Feed nvd
🇸🇦 Saudi Risk Score
6.0
/ 10.0 — Saudi Risk
Priority: MEDIUM
🏷️ Tags
CWE-74
⚡ Actions
🔗 NVD Official Page ⚡ Exploit-DB Search 🐙 GitHub PoC Search 🎯 MITRE ATT&CK 📊 CVE Details
Share this CVE
LinkedIn X / Twitter WhatsApp Telegram
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.