<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wl-wn579x3-c firmware</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2026-5004: A vulnerability was determined in Wavlink WL-WN579X3-C 231124</title><link>https://patchthecve.com/cve/CVE-2026-5004.html</link><guid>https://patchthecve.com/cve/CVE-2026-5004.html</guid><pubDate>Wed, 17 Jun 2026 10:58:14 +0000</pubDate><description>HIGH 8.8: A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a manipulation of the argument UpnpEnabled can lead to stack-based buffer overflow. It is possible to launch the attack remot</description></item><item><title>CVE-2026-3716: A vulnerability was determined in Wavlink WL-WN579X3-C 231124</title><link>https://patchthecve.com/cve/CVE-2026-3716.html</link><guid>https://patchthecve.com/cve/CVE-2026-3716.html</guid><pubDate>Wed, 17 Jun 2026 10:44:03 +0000</pubDate><description>LOW 2.4: A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argument Hostname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publi</description></item><item><title>CVE-2026-3715: A vulnerability was found in Wavlink WL-WN579X3-C 231124</title><link>https://patchthecve.com/cve/CVE-2026-3715.html</link><guid>https://patchthecve.com/cve/CVE-2026-3715.html</guid><pubDate>Wed, 17 Jun 2026 10:44:03 +0000</pubDate><description>HIGH 8.8: A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made publi</description></item></channel></rss>