AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-3715

HIGH · CVSS 8.8 EPSS 0.66% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-03-08 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 8.8. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-3715
Severity
HIGH
CVSS
8.8
EPSS
0.66%

Original NVD Description

A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 20260226 is able to mitigate this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Related CVEs

Other vulnerabilities affecting the same vendor(s)