Unrated severityNVD Advisory· Published Feb 16, 2026· Updated Feb 23, 2026
Wavlink WL-WN579A3 wireless.cgi DeleteMac command injection
CVE-2026-2529
Description
A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list results in command injection. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:wavlink:wl-wn579a3_firmware:*:*:*:*:*:*:*:*range: 20210219
- (no CPE)range: <=20210219
Patches
Vulnerability mechanics
References
4- vuldb.commitrethird-party-advisory
- github.com/MRAdera/IoT-Vuls/blob/main/wavlink/wn579a3/DeleteMac.mdmitrerelated
- vuldb.commitresignaturepermissions-required
- vuldb.commitrevdb-entrytechnical-description
News mentions
0No linked articles in our index yet.