CVE-2024-36290

A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an unauthenticated HTTP request to trigger this vulnerability.

• CWE-120

• https://talosintelligence.com/vulnerability_reports/TALOS-2024-2019Exploit, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2019Exploit, Third Party Advisory

Published

Jan 14, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-36285Race condition in some Intel(R) PROSet/Wireless WiFi and Kil…5.7
• CVE-2024-36286In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36287Mattermost Desktop App versions <=5.7.0 fail to disable cert…3.3
• CVE-2024-36288In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-36289Reusing a nonce, key pair in encryption issue exists in "Fre…5.3
• CVE-2024-3629The HL Twitter WordPress plugin through 2014.1.18 does not h…2.4
• CVE-2024-36291Uncontrolled search path for some Intel(R) Chipset Software …6.7
• CVE-2024-36292Improper buffer restrictions for some Intel(R) Data Center G…8.2
• CVE-2024-36293Improper access control in the EDECCSSA user leaf function f…6.8
• CVE-2024-36294Insecure inherited permissions for some Intel(R) DSA softwar…7.8
• CVE-2024-36295A command execution vulnerability exists in the qos.cgi qos_…7.2
• CVE-2024-3630The HL Twitter WordPress plugin through 2014.1.18 does not s…5.4