GCVE - cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Wavlink (`b3b0198b-0ff8-5498-8769-561cf3fe0e3d`)
Product	Wl Wn579A3 Firmware (`fc5b7ec4-6a16-5b6a-93a6-c294465ef09b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-6559`	vulnerable	2026-06-08 08:07:04.886869	Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting MEDIUM (4.3) A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. Published: 2026-04-19T05:15:15.503Z Updated: 2026-04-20T16:07:54.597Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/358196 https://vuldb.com/vuln/358196/cti https://vuldb.com/submit/785303 https://github.com/Litengzheng/vul_db/blob/main/WL-WN579A3/vul_16/README.md https://dl.wavlink.com/firmware/RD/WINSTAR_WN579A3-A-2026-03-10-94f93d4-WO-mt7628-squashfs-sysupgrade.bin	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4163`	vulnerable	2026-06-08 08:05:12.720824	Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection CRITICAL (9.8) A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading the affected component is recommended. Published: 2026-03-14T22:32:10.502Z Updated: 2026-03-17T14:11:25.056Z Open on db.gcve.eu Reference links https://vuldb.com/?id.351070 https://vuldb.com/?ctiid.351070 https://vuldb.com/?submit.765327 https://vuldb.com/?submit.765328 https://github.com/Litengzheng/vul_db/blob/main/WL-WN579A3/vul_9/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2530`	vulnerable	2026-06-08 07:55:17.178437	Wavlink WL-WN579A3 wireless.cgi AddMac command injection MEDIUM (6.3) A weakness has been identified in Wavlink WL-WN579A3 up to 20210219. This affects the function AddMac of the file /cgi-bin/wireless.cgi. This manipulation of the argument macAddr causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T02:32:06.862Z Updated: 2026-02-23T10:04:27.221Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346118 https://vuldb.com/?ctiid.346118 https://vuldb.com/?submit.748077 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/AddMac.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2529`	vulnerable	2026-06-08 07:55:17.177975	Wavlink WL-WN579A3 wireless.cgi DeleteMac command injection MEDIUM (6.3) A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list results in command injection. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T02:02:08.617Z Updated: 2026-02-23T10:04:14.698Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346117 https://vuldb.com/?ctiid.346117 https://vuldb.com/?submit.748076 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/DeleteMac.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2528`	vulnerable	2026-06-08 07:55:17.177608	Wavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection MEDIUM (6.3) A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function Delete_Mac_list of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-02-16T02:02:07.067Z Updated: 2026-02-23T10:04:01.174Z Open on db.gcve.eu Reference links https://vuldb.com/?id.346116 https://vuldb.com/?ctiid.346116 https://vuldb.com/?submit.748075 https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/Delete_Mac_list.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2527`	vulnerable	2026-06-08 07:55:17.177088	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2526`	vulnerable	2026-06-08 07:55:17.175916	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.