CVE-2026-3716 | Wavlink WL-WN579X3-C 231124 /cgi-bin/adm.cgi sub_401AD4 Hostname cross site scripting

A vulnerability labeled as problematic has been found in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argument Hostname can lead to cross site scripting.

This vulnerability is registered as CVE-2026-3716. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The affected component should be upgraded.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.