CVE-2026-74843 - Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow
Brief
CVE ID : CVE-2026-74843
Published : Aug. 17, 2026, 12:18 p. m.
- 48 minutes ago
Description : A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export_pingortrace. cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP_COOKIE can lead to stack-based buffer overflow. The attack may be launched remotely.
The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Severity: 10.0
- CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...