CVE-2026-3715CWE-119CWE-121

Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflow

High · published March 8, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 20260226 is able to mitigate this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01048 · 63.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-03-08T06:32Z
EPSS history
Timeline
  • 08 MAR 06:32Z
    Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflow
    cvelistv5