CVE-2024-39799 is a critical vulnerability in the openvpn.cgi openvpn_server_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. It involves multiple external configuration control flaws that allow an authenticated attacker to execute arbitrary commands via specially crafted HTTP requests. The vulnerability specifically includes a configuration injection issue in the sel_open_interface POST parameter.