CVE-2026-5004CWE-119CWE-121

Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow

High · published March 28, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a manipulation of the argument UpnpEnabled can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
EPSS
0.01058 · 64.2th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-03-28T17:30Z
EPSS history
Timeline
  • 28 MAR 17:30Z
    Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow
    cvelistv5