CVE-2026-4163: Wavlink Wl-WN579A3

Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days.

A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading the affected component is recommended.

Affected products

• Wavlink Wl-WN579A3: version 220323 only

Published 2026-03-16. Last modified 2026-06-17.