TI-2026-03206 Aliases CVE-2026-3715 GHSA-7hf8-hqfw-77qp

Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflow

HIGH 73CWE-119Published 2026-03-08 · Updated 2026-03-11

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 20260226 is able to mitigate this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00745 55th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA and NVD

Fix Fixed WL-WN579X3-C (Wavlink): 20260226

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Wavlink	WL-WN579X3-C	231124	20260226	Patch available	CNA

WL-WN579X3-C VendorWavlink Affected 231124 Fixed in 20260226 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:o:wavlink:wl-wn579x3-c_firmware:231124:::::::*	231124	Vulnerable	Wavlink
cpe:2.3:h:wavlink:wl-wn579x3-c:-:::::::*	not specified by NVD	Running on	Wavlink

cpe:2.3:o:wavlink:wl-wn579x3-c_firmware:231124:*:*:*:*:*:*:* Versions 231124 Vulnerable ·Wavlink
cpe:2.3:h:wavlink:wl-wn579x3-c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Wavlink

Remediation

Fix · CNA WL-WN579X3-C (Wavlink) Fixed in 20260226

Timeline

2026-10-02 Threatist record created from CVE-2026-3715
2026-10-03 Alias added: GHSA-7hf8-hqfw-77qp

References

Exploit 1

https://github.com/Litengzheng/vul_db/blob/main/WL-WN579X3-C/vul_17/README.md

Patch 1

https://dl.wavlink.com/firmware/RD/WN579X3C_WAVLINK_V20260226_WO_cb3003b2.bin

TI-2026-04364 Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow CVSS 4.0HIGH 8.7
TI-2026-03207 Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scripting CVSS 4.0MEDIUM 4.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences