Wavlink Wl-WN579A3 vulnerabilities

2 CVEs affecting Wavlink Wl-WN579A3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-6559, published 2026-04-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-4163, published 2026-03-16. Critical severity, CVSS 9.8. EPSS: 3.7% chance of exploitation in the next 30 days. A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a…
CVE-2026-6559, published 2026-04-19. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site…