Vulnerabilities

TI-2026-83752 CVE-2026-120345 · GHSA-5m3x-rp28-cf8g

OS command injection in WAVLINK WN551X3-A DNS resolution handler

HIGH 82

A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01989 Published 2026-11-02 No fix listed CWE-77

TI-2026-83751 CVE-2026-120344 · GHSA-fqxg-jwfx-25cg

WAVLINK WN551X3-A WireGuard CLI Group ioos os command injection

HIGH 82

A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01989 Published 2026-11-02 No fix listed CWE-77

TI-2026-83669 CVE-2026-120282 · GHSA-7888-qfjf-w47r

OS command injection in WAVLINK WN536AX6-A protocol.csp

HIGH 76

A vulnerability was determined in WAVLINK WN536AX6-A V260507.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01652 Published 2026-11-02 No fix listed CWE-77

TI-2026-83668 CVE-2026-120281 · GHSA-rg96-pw5p-hj64

Stack-based overflow in WAVLINK WN536AX6-A OpenVPN handler

HIGH 82

A vulnerability was found in WAVLINK WN536AX6-A V260507.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00584 Published 2026-11-02 No fix listed CWE-119

TI-2026-83667 CVE-2026-120280 · GHSA-q3mh-mrr2-xh2h

OS command injection in WAVLINK WN536AX6-A WireGuard handler

HIGH 82

A vulnerability has been found in WAVLINK WN536AX6-A V260507.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01989 Published 2026-11-02 No fix listed CWE-77

TI-2026-83666 CVE-2026-120279 · GHSA-x3j2-x298-hcr4

OS command injection in WAVLINK WN536AX6-A openvpn_cli handler

HIGH 82

A flaw has been found in WAVLINK WN536AX6-A V260507.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.01989 Published 2026-11-02 No fix listed CWE-77

TI-2026-83665 CVE-2026-120278 · GHSA-v6ff-2mqg-mg4g

Missing authentication in WAVLINK WN536AX6-A VPN Client List handler

HIGH 70

A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00394 Published 2026-11-01 No fix listed CWE-287

TI-2026-83664 CVE-2026-120277 · GHSA-f5q6-27px-wgxf

WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 OS command injection

HIGH 82

A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02451 Published 2026-11-01 No fix listed CWE-77

TI-2026-83663 CVE-2026-120276 · GHSA-jxgh-x37p-hq3v

OS command injection in WAVLINK WN536AX6-A web management interface

HIGH 82

A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03211 Published 2026-11-01 No fix listed CWE-77

TI-2026-83639 CVE-2026-120240 · GHSA-mqwg-mjc3-vq36

Command injection in WAVLINK WN553X1-B WireGuard CLI group handler

HIGH 76

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01687 Published 2026-11-01 No fix listed CWE-77

TI-2026-83638 CVE-2026-120239 · GHSA-9jcp-f9g9-fr7w

OS command injection in WAVLINK WN553X1-B WireGuard CLI handler

HIGH 76

A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01687 Published 2026-11-01 No fix listed CWE-77

TI-2026-83637 CVE-2026-120238 · GHSA-g953-8239-77h5

OS command injection in WAVLINK WN553X1-B ovpn_file handler

HIGH 76

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01687 Published 2026-11-01 No fix listed CWE-77

TI-2026-83624 CVE-2026-120231 · GHSA-5268-gj55-x6jx

OS command injection in WAVLINK WN553X1-B OpenVPN CLI handler

HIGH 76

A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01687 Published 2026-11-01 No fix listed CWE-77

TI-2026-83623 CVE-2026-120230 · GHSA-ph6g-f82q-hgpw

WAVLINK WN701AE ioos Web Backend del_vlan_group OS command injection

HIGH 76

A vulnerability was found in WAVLINK WN701AE 260105.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.02211 Published 2026-11-01 No fix listed CWE-77

TI-2026-83622 CVE-2026-120229 · GHSA-2qm5-r7wj-f399

WAVLINK WN553X1-B ioos sub_416B50 os command injection

HIGH 76

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0.

CVSS 4.0CRITICAL 9.4 Network High privileges No interaction EPSS 0.02823 Published 2026-11-01 No fix listed CWE-77

TI-2026-83621 CVE-2026-120228 · GHSA-cfhj-2xf7-r697

WAVLINK WN553X1-B ioos Service sub_416D88 OS command injection

HIGH 76

A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01652 Published 2026-11-01 No fix listed CWE-77

TI-2026-83616 CVE-2026-120227 · GHSA-gx7m-hhf4-785q

OS command injection in WAVLINK WN701AE ioos Web Backend

HIGH 76

A vulnerability was detected in WAVLINK WN701AE M01AE_V260105.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.02211 Published 2026-11-01 No fix listed CWE-77

TI-2026-83583 CVE-2026-120198 · GHSA-cq8m-m2p5-jxxm

Command injection in WAVLINK WL-WN530BE1-A via protocol.csp

HIGH 82

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0207 Published 2026-11-01 No fix listed CWE-74

TI-2026-83582 CVE-2026-120197 · GHSA-jq5g-pp5w-q8h6

OS command injection in WAVLINK WL-WN530HG4B port_forward function

HIGH 76

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01687 Published 2026-11-01 No fix listed CWE-77

TI-2026-83581 CVE-2026-120196 · GHSA-fmc2-w58f-qqpv

OS command injection in WAVLINK WN579X3-D wapi.cgi port_forward

HIGH 76

A vulnerability was detected in WAVLINK WN579X3-D V250402.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.01687 Published 2026-11-01 No fix listed CWE-77

TI-2026-83580 CVE-2026-120195 · GHSA-3wx6-ffgj-fwjg

OS command injection in WAVLINK WL-WN579A3-A Initial Setup Wizard

HIGH 82

A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0207 Published 2026-11-01 No fix listed CWE-77

TI-2026-76993 CVE-2026-113802 · GHSA-j6fh-9747-5rv9

OS command injection in Wavlink WL-WN530BE1-A firmware

HIGH 81

Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.03472 Published 2026-10-20 No fix listed CWE-78

TI-2026-74806 CVE-2026-110958

Heap-based buffer overflow in Wavlink WN530HG4B api.cgi

HIGH 82

A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.0102 Published 2026-10-15 Fixed in 2026-09-24-841a51c6d5_tclinux.bin CWE-119

TI-2026-74783 CVE-2026-110957

OS command injection in Wavlink WL-WN530BE2-A login processing

HIGH 82

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.03066 Published 2026-10-15 Fixed in 2026-09-24-841a51c6d5_tclinux.bin CWE-77

TI-2026-71564 CVE-2026-109110 · GHSA-6fjw-pj9v-fhcm

OS command injection in Wavlink WL-WN592AX6 wmapd daemon

HIGH 82

A flaw has been found in Wavlink WL-WN592AX6 250422.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.02028 Published 2026-10-13 No fix listed CWE-77

Vulnerabilities

Filters