Skip to content
Threat Feed
Subscribe

Vendor

WAVLINK

12 briefs RSS
critical advisory

Wavlink WN551X3-A: Remote OS Command Injection (CVE-2026-120345)

A critical OS command injection vulnerability in the DNS Resolution Handler of Wavlink WN551X3-A allows unauthenticated remote attackers to execute arbitrary commands via the data argument, with a public proof-of-concept exploit now available.

WN551X3-A cve-2026-120344 vulnerability router rce
2t 2c
critical advisory

WAVLINK WN536AX6-A: Remote command injection (CVE-2026-120276)

A remote OS command injection vulnerability exists in the WAVLINK WN536AX6-A router, version V260507_2.0.0.

PoC WN536AX6-A +1 RCE Command Injection
6c
critical advisory

WAVLINK WN553X1-B: OS command injection (CVE-2026-120231)

A vulnerability in the OpenVPN CLI Handler component of the WAVLINK WN553X1-B (firmware V260403_2.0.0) allows remote OS command injection via the 'file_id' argument.

WN553X1-B +1
3c updated
critical advisory

WAVLINK WL-WN579A3-A: Remote OS command injection (CVE-2026-120195)

A remote OS command injection vulnerability exists in the Initial Setup Wizard of WAVLINK WL-WN579A3-A firmware version 2026-03-10-94f93d4.

WL-WN579A3-A
1c
critical advisory

Wavlink WL-WN530BE1-A: OS command injection via /protocol.csp (CVE-2026-113802)

Wavlink WL-WN530BE1-A firmware through version M30BE1_V251117 is vulnerable to unauthenticated remote code execution via an OS command injection flaw in the /protocol.csp endpoint.

WL-WN530BE1-A
1r 1t 1c
critical advisory

Remote Heap-Based Buffer Overflow in Wavlink WN530HG4B

A heap-based buffer overflow in the api.cgi component of Wavlink WN530HG4B firmware allows unauthenticated remote attackers to execute arbitrary code via malformed input to the api=info&client=app handler.

WN530HG4B remote-code-execution buffer-overflow network-security firmware-vulnerability
2t 1c
critical advisory

Remote Command Injection in Wavlink WL-WN530BE2-A

An unauthenticated remote code execution vulnerability (CVE-2026-110957) in the Wavlink WL-WN530BE2-A router allows attackers to inject OS commands via the REMOTE_ADDR parameter in api.cgi.

WL-WN530BE2-A vulnerability rce network-security cve-2026-110957
2t 1c
critical advisory

Remote Command Injection in Wavlink WL-WN592AX6

The wmapd daemon in Wavlink WL-WN592AX6 firmware version 250422 is vulnerable to remote, unauthenticated OS command injection, allowing full device takeover.

WL-WN592AX6 remote-code-execution command-injection iot router network-infrastructure
2t 1c
critical advisory

Unauthenticated Arbitrary File Write in WAVLINK Routers

WAVLINK WN535M1 and WN535M3 routers are vulnerable to unauthenticated arbitrary file writes via the sync_server daemon, enabling attackers to gain root-level persistence.

WN535M1 +1 network-security remote-code-execution cve-2026-89009
2t 1c
critical advisory

Critical Buffer Overflow in Wavlink Router Export Pingortrace CGI

A critical stack-based buffer overflow in Wavlink WN531P3 and WN535M1 devices allows remote code execution via crafted HTTP cookie data.

WN531P3 +1 cve-2026-74843 rce buffer-overflow network-appliance
1r 1t 1c
high advisory

Remote Stack-Based Buffer Overflow in Wavlink Networking Devices

Multiple Wavlink networking devices are vulnerable to a remote stack-based buffer overflow in the lighttpd component due to insecure use of strcpy in the upload.cgi script via the HTTP_COOKIE header.

WN572 +10 vulnerability rce network-infrastructure
1t 1c 1i
critical advisory

Stack-based Buffer Overflow in Wavlink WL-NU516U1 nas.cgi

A stack-based buffer overflow vulnerability in the nas.cgi file of Wavlink WL-NU516U1 routers allows remote, unauthenticated attackers to execute arbitrary code via a malicious CONTENT_LENGTH argument.

WL-NU516U1 +1 cve-2026-18589 buffer-overflow router rce
4t 1c