GCVE - cpe:2.3:h:wavlink:wl-wn579a3:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:wavlink:wl-wn579a3:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Wavlink (`b3b0198b-0ff8-5498-8769-561cf3fe0e3d`)
Product	Wl Wn579A3 (`76999ae7-9833-554d-afd1-e4c7fd5c4cd6`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-2530`	not_vulnerable	2026-06-08 07:55:17.178596	Wavlink WL-WN579A3 wireless.cgi AddMac command injection MEDIUM (6.3) A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T02:32:06.862Z Updated: 2026-02-23T10:04:27.221Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346118 https://vuldb.com/?ctiid.346118 https://vuldb.com/?submit.748077 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/AddMac.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2529`	not_vulnerable	2026-06-08 07:55:17.178007	Wavlink WL-WN579A3 wireless.cgi DeleteMac command injection MEDIUM (6.3) A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list results in command injection. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T02:02:08.617Z Updated: 2026-02-23T10:04:14.698Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346117 https://vuldb.com/?ctiid.346117 https://vuldb.com/?submit.748076 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/DeleteMac.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2528`	not_vulnerable	2026-06-08 07:55:17.177644	Wavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection MEDIUM (6.3) A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function Delete_Mac_list of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T02:02:07.067Z Updated: 2026-02-23T10:04:01.174Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346116 https://vuldb.com/?ctiid.346116 https://vuldb.com/?submit.748075 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/Delete_Mac_list.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2527`	not_vulnerable	2026-06-08 07:55:17.177246	Wavlink WL-WN579A3 login.cgi command injection MEDIUM (6.3) A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T01:32:05.801Z Updated: 2026-02-23T10:03:49.614Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346115 https://vuldb.com/?ctiid.346115 https://vuldb.com/?submit.748074 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/login.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2526`	not_vulnerable	2026-06-08 07:55:17.176647	Wavlink WL-WN579A3 wireless.cgi multi_ssid command injection MEDIUM (6.3) A vulnerability was found in Wavlink WL-WN579A3 up to 20210219. This impacts the function multi_ssid of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument SSID2G2 results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T01:02:08.386Z Updated: 2026-02-23T10:03:35.983Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346114 https://vuldb.com/?ctiid.346114 https://vuldb.com/?submit.748073 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/multi_ssid.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44882`	not_vulnerable	2026-06-08 07:25:10.871353	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44881`	not_vulnerable	2026-06-08 07:25:10.870914	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-44880`	not_vulnerable	2026-06-08 07:25:10.870280	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.