Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a manipulation of the argument UpnpEnabled can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
| Date | Total | Labels |
|---|
| 2026-03-27 | 1 | Disclosure1 |
| 2026-03-28 | 3 | Disclosure3 |
| 2026-03-29 | 1 | Disclosure1 |
CVE-2026-5004 A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Exe… https://www.cve.org/CVERecord?id=CVE-2026-5004
Post summary
The text announces a newly identified vulnerability (CVE‑2026‑5004) in Wavlink WL‑WN579X3‑C, describing the affected function and component.
🟠 CVE-2026-5004 - High A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a manipulation of... https://www.thehackerwire.com/vulnerability/CVE-2026-5004/ https://t.co/I8NI64c40Q
Post summary
A new high‑severity vulnerability (CVE‑2026‑5004) affecting the UPNP handler in Wavlink routers has been disclosed, detailing the impacted function and file but offering no PoC, exploit, or patch announcements.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-5004 - Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow Intel Report: https://ift.tt/q1Xtl5T
Post summary
An Intel report announced a stack‑based overflow vulnerability (CVE-2026-5004) in the Wavlink WL‑WN579X3‑C UPNP firewall.cgi, but no PoC, exploit, or patch details were provided.
[CVE-2026-5004: HIGH] A critical stack-based buffer overflow vulnerability impacting Wavlink WL-WN579X3-C 231124's UPNP Handler has been publicly disclosed, allowing remote attacks. The vendor has been unrespo...#cve,CVE-2026-5004,#cybersecurity https://cvefind.com/CVE-2026-5004
Post summary
CVE-2026-5004 is a publicly disclosed stack‑based buffer overflow in Wavlink's UPNP handler, enabling remote attacks.
There is a new vulnerability with elevated criticality in Wavlink WL-WN579X3-C (CVE-2026-5004) https://vuldb.com/?id.353891
Post summary
A new critical vulnerability (CVE-2026-5004) has been identified in the Wavlink WL-WN579X3-C device.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | wavlink | wl-wn579x3-c | - | - | - |
| OS | wavlink | wl-wn579x3-c_firmware | 231124 | - | - |