CVE-2026-2529 | Wavlink WL-WN579A3 up to 20210219 /cgi-bin/wireless.cgi DeleteMac delete_list command injection

February 15, 2026 Yanac

A vulnerability categorized as critical has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list results in command injection.

This vulnerability is identified as CVE-2026-2529. The attack can be executed remotely. There is not any exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More