CVE-2026-3715 - Vulnerability Analysis

Overview

Wavlink WL-WN579X3-C 231124 contains a stack-based buffer overflow caused by manipulation of the "del_flag" argument in /cgi-bin/firewall.cgi, letting remote attackers cause memory corruption, exploit requires crafted request.

Severity & Score

Impact

Remote attackers can cause memory corruption, potentially leading to remote code execution or system crash.

Mitigation

Upgrade to version 20260226.

References

• https://vuldb.com/?ctiid.349660
• https://vuldb.com/?id.349660
• https://vuldb.com/?submit.765325
• https://dl.wavlink.com/firmware/RD/WN579X3C_WAVLINK_V20260226_WO_cb3003b2.bin
• https://github.com/Litengzheng/vul_db/blob/main/WL-WN579X3-C/vul_17/README.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner