The vulnerability of the DeleteMac function in the /cgi-bin/wireless.cgi script of the Wavlink router software, which allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DeleteMac function in the /cgi-bin/wireless.cgi script of the Wavlink WL-WN579A3 router software is related to the lack of data cleaning measures at the control level when processing the deletelist parameter results. Exploiting this vulnerability could allow an attacker t...

CVE-2026-2529

A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument deletelist results in command injection. The attack can be executed remotely. The vendor was contacted ear...

CVE-2026-2529

Wavlink WL-WN579A3 is affected by CVE-2026-2529 in the DeleteMac function of /cgi-bin/wireless.cgi. The delete_list argument can be manipulated to trigger command injection, enabling remote code execution. Affected firmware is listed as up to 20210219. Public sources consistently describe remote ...

CVE-2026-2528

A vulnerability was identified in Wavlink WL-WN579A3 up to 20210219. Affected by this vulnerability is the function DeleteMaclist of the file /cgi-bin/wireless.cgi. The manipulation of the argument deletelist leads to command injection. Remote exploitation of the attack is possible. The exploit i...

EUVD-2025-29091

Malicious code in bioql PyPI...

CVE-2025-10960

A vulnerability was found in Wavlink NU516U1 M16U1V240425. The impacted element is the function sub402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument deletelist results in command injection. The attack is possible to be carried out...

CVE-2025-10960

A vulnerability was found in Wavlink NU516U1 M16U1V240425. The impacted element is the function sub402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument deletelist results in command injection. The attack is possible to be carried out...

The vulnerability of the sub_404850() function (/cgi-bin/wireless.cgi) in the microprogrammed software for WAVLINK WL-WN578W2 allows a hacker to execute arbitrary commands.

The vulnerability of the sub404850 function /cgi-bin/wireless.cgi of the WAVLINK WL-WN578W2 signal amplifier software is related to the failure to take measures to neutralize special elements used in the operating system’s command for processing the deletelist parameter. Exploiting this...