Description
A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export_pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP_COOKIE can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Published: 2026-08-17
Score: 10 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw occurs in the strcpy function within the /etc/lighttpd/www/cgi-bin/export_pingortrace.cgi component. A malicious actor can craft a specially sized HTTP_COOKIE header that overflows the stack, allowing arbitrary code execution on the device. This leads to a complete loss of confidentiality, integrity, and availability of the affected device.

Affected Systems

The vulnerability affects Wavlink WN531P3 and WN535M1 routers running firmware V250922. No other versions are listed as impacted.

Risk and Exploitability

The CVSS score of 10 denotes the highest severity. EPSS data is not available, and the issue is not listed in CISA KEV, yet public exploits have been disclosed and the flaw can be launched remotely from any network that can reach the device. The absence of a mitigation advisory does not reduce the likelihood; attackers can feed the overflow payload via the HTTP_COOKIE header to trigger arbitrary code execution.

Generated by OpenCVE AI on August 17, 2026 at 12:30 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the router firmware to the latest recognized vendor release that includes the fixed CGI module
  • If a firmware update is not immediately available, replace the vulnerable export_pingortrace.cgi script with a version that removes the unsafe strcpy call or enforces strict input size checks
  • Block or remove access to /cgi-bin/export_pingortrace.cgi using firewall rules or access control lists to prevent remote exploitation

Generated by OpenCVE AI on August 17, 2026 at 12:30 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 17 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 17 Aug 2026 11:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export_pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the argument HTTP_COOKIE can lead to stack-based buffer overflow. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Title Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow
First Time appeared Wavlink
Wavlink wn531p3
Wavlink wn535m1
Weaknesses CWE-119
CWE-121
CPEs cpe:2.3:a:wavlink:wn531p3:*:*:*:*:*:*:*:*
cpe:2.3:a:wavlink:wn535m1:*:*:*:*:*:*:*:*
Vendors & Products Wavlink
Wavlink wn531p3
Wavlink wn535m1
References
Metrics cvssV2_0

{'score': 10, 'vector': 'AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 10, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 10, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P'}

Subscriptions

Wavlink Wn531p3 Wn535m1
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-08-17T14:44:57.952Z

Reserved: 2026-08-17T04:49:13.431Z

Link: CVE-2026-74843

cve-icon Vulnrichment

Updated: 2026-08-17T14:44:54.297Z

cve-icon NVD

Status : Deferred

Published: 2026-08-17T12:18:58.180

Modified: 2026-08-20T12:48:31.843

Link: CVE-2026-74843

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T21:19:48Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-121

    Stack-based Buffer Overflow