CVE-2026-3715 | Wavlink WL-WN579X3-C 231124 /cgi-bin/firewall.cgi sub_40139C del_flag stack-based overflow

A vulnerability identified as critical has been detected in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow.

This vulnerability is cataloged as CVE-2026-3715. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

You should upgrade the affected component.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.