CVE-2026-2527

A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-77
• CWE-77

• https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/login.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.346115Permissions Required, VDB Entry
• https://vuldb.com/?id.346115Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.748074Third Party Advisory, VDB Entry

Published

Feb 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25264Privilege escalation due to weak configuration during packag…8.8
• CVE-2026-25265Privilege escalation due to weak configuration while tempora…8.8
• CVE-2026-25266Memory corruption while processing IOCTL command when device…7.8
• CVE-2026-25267Memory corruption when non-secure loader rewrites page table…7.8
• CVE-2026-25268Memory Corruption when processing invalid HT40 channel layou…8.8
• CVE-2026-25269Memory corruption when processing camera requests with exces…6.7
• CVE-2026-25270Memory corruption when processing command buffer requests wi…6.7
• CVE-2026-25271Memory Corruption when processing asynchronous input paramet…7
• CVE-2026-25272Memory Corruption when processing camera CRE driver operatio…6.7
• CVE-2026-25273Memory Corruption when processing camera operations due to o…6.7
• CVE-2026-25274Memory Corruption when processing concurrent DMA buffer allo…6.7
• CVE-2026-25275Transient DOS when processing authentication frames with inv…7.5