Approved changes feed: RSS · Atom

cpe:2.3:h:wavlink:wl-wn579x3-c:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorWavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d)
ProductWl Wn579X3 C (77053301-eea1-560c-b732-52490b8b43c5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5004 not_vulnerable 2026-06-08 08:07:02.858658 Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow
HIGH (8.8)
A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a manipulation of the argument UpnpEnabled can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-03-28T17:30:12.944Z
Updated: 2026-03-30T16:01:33.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3716 not_vulnerable 2026-06-08 08:01:19.234774 Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scripting
LOW (2.4)
A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argument Hostname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 20260226 is able to resolve this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Published: 2026-03-08T07:02:08.804Z
Updated: 2026-03-11T13:50:31.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3715 not_vulnerable 2026-06-08 08:01:19.234237 Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflow
HIGH (8.8)
A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 20260226 is able to mitigate this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Published: 2026-03-08T06:32:15.382Z
Updated: 2026-03-11T13:48:43.677Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.