CVE-2026-3716

🗓️ 08 Mar 2026 07:02:08Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 10 Views🌐 WEB

CVE-2026-3716: Wavlink WL-WN579X3-C adm.cgi sub_401AD4 enables remote cross site scripting via Hostname manipulation.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-3716	8 Mar 202607:02	–	attackerkb
Circl	CVE-2026-3716	8 Mar 202607:15	–	circl
CNNVD	Wavlink WL-WN579X3-C 代码注入漏洞	8 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-3716 Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scripting	8 Mar 202607:02	–	cvelist
EUVD	EUVD-2026-10222	8 Mar 202609:30	–	euvd
NVD	CVE-2026-3716	8 Mar 202608:15	–	nvd
OSV	CVE-2026-3716	8 Mar 202608:15	–	osv
Positive Technologies	PT-2026-23924	8 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-3716	9 Mar 202608:02	–	redhatcve
Vulnrichment	CVE-2026-3716 Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scripting	8 Mar 202607:02	–	vulnrichment

NVD

Vulners

Node

wavlink wl-wn579x3-c_firmwareMatch231124

AND

wavlink wl-wn579x3-cMatch-

[
  {
    "vendor": "Wavlink",
    "product": "WL-WN579X3-C",
    "versions": [
      {
        "version": "231124",
        "status": "affected"
      },
      {
        "version": "20260226",
        "status": "unaffected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
dl	www.dl.wavlink.com/firmware/RD/WN579X3C_WAVLINK_V20260226_WO_cb3003b2.bin
github	www.github.com/Litengzheng/vul_db/blob/main/WL-WN579X3-C/vul_18/README.md

Parameter	Position	Path	Description	CWE
Hostname	query param	/cgi-bin/adm.cgi	Cross-site scripting via manipulation of Hostname parameter in /cgi-bin/adm.cgi on WL-WN579X3-C	CWE-79, CWE-94

17 Jun 2026 10:44Current

4.1Medium risk

Vulners AI Score4.1

CVSS 3.12.4 - 4.8

CVSS 23.3

CVSS 44.8

CVSS 32.4

EPSS0.00228

SSVC