CVE-2026-2527

A vulnerability was determined in Wavlink WL-WN579A3 up to 20210219. Affected is an unknown function of the file /cgi-bin/login.cgi. Executing a manipulation of the argument key can lead to command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-77
• CWE-77

• https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/login.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.346115Permissions Required, VDB Entry
• https://vuldb.com/?id.346115Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.748074Third Party Advisory, VDB Entry

Published

Feb 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25261Memory corruption while processing rear sensor IOCTL calls.7.8
• CVE-2026-25262Memory corruption while processing a crafted ELF file in the…6.9
• CVE-2026-25264Privilege escalation due to weak configuration during packag…8.8
• CVE-2026-25265Privilege escalation due to weak configuration while tempora…8.8
• CVE-2026-25266Memory corruption while processing IOCTL command when device…7.8
• CVE-2026-25268Memory Corruption when processing invalid HT40 channel layou…8.8
• CVE-2026-25271Memory Corruption when processing asynchronous input paramet…7
• CVE-2026-25275Transient DOS when processing authentication frames with inv…7.5
• CVE-2026-25276Memory corruption while using Strongbox due to missing bound…8.8
• CVE-2026-25277Memory corruption while using Strongbox due to buffer overfl…8.8
• CVE-2026-25278Memory Corruption when processing I2C transfer requests due …7
• CVE-2026-2528A vulnerability was identified in Wavlink WL-WN579A3 up to 2…9.8