CVE-2026-2528

A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function Delete_Mac_list of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to command injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-74
• CWE-77
• CWE-77

• https://github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/Delete_Mac_list.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.346116Permissions Required, VDB Entry
• https://vuldb.com/?id.346116Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.748075Third Party Advisory, VDB Entry

Published

Feb 16, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-2527A vulnerability was determined in Wavlink WL-WN579A3 up to 2…9.8
• CVE-2026-25271Memory Corruption when processing asynchronous input paramet…7
• CVE-2026-25275Transient DOS when processing authentication frames with inv…7.5
• CVE-2026-25276Memory corruption while using Strongbox due to missing bound…8.8
• CVE-2026-25277Memory corruption while using Strongbox due to buffer overfl…8.8
• CVE-2026-25278Memory Corruption when processing I2C transfer requests due …7
• CVE-2026-25280Memory corruption when processing escape handling flow with …7.8
• CVE-2026-25281Transient DOS when processing large or numerous request buff…7.4
• CVE-2026-25282Transient DOS when processing unverified data from a neighbo…7.9
• CVE-2026-25283Memory Corruption when copying unverified data from an exter…8.8
• CVE-2026-25284Information Disclosure when a pointer is reused after being …7.3
• CVE-2026-25288Transient DOS when processing a short target wake time chann…7.4