Vulnerabilidades en WAVLINK
137 resultadosAnálisis Vexday
Wavlink acumula 11 vulnerabilidades catalogadas, sendo 1 de severidade crítica, mas nenhuma sob exploração ativa conhecida até o momento. A fraqueza dominante é CWE-77 (command injection), padrão típico em dispositivos de rede, e o risco não é recente — ausência de divulgações nos últimos 90 dias sugere que a base de vulnerabilidades é estabilizada e de menor dinâmica de descoberta.
CVE-2026-3612HIGHWavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injectionEPSS 10.0%CVE-2024-37357CRITICALA buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTEPSS 9.7%CVE-2026-8228MEDIUMWavlink NU516U1 wireless.cgi advance os command injectionEPSS 8.5%CVE-2026-8227MEDIUMWavlink NU516U1 adm.cgi wzdapMesh os command injectionEPSS 8.5%CVE-2026-8190MEDIUMWavlink NU516U1 adm.cgi wan os command injectionEPSS 8.5%CVE-2026-8188MEDIUMWavlink NU516U1 adm.cgi change_wifi_password os command injectionEPSS 8.5%CVE-2026-8189MEDIUMWavlink NU516U1 adm.cgi wzdrepeater os command injectionEPSS 8.5%CVE-2026-8192MEDIUMWavlink NU516U1 adm.cgi wzdap os command injectionEPSS 8.5%CVE-2026-8230MEDIUMWavlink NU516U1 login.cgi sys_login1 os command injectionEPSS 8.5%CVE-2026-8191MEDIUMWavlink NU516U1 adm.cgi wifi_region os command injectionEPSS 8.5%CVE-2026-8229MEDIUMWavlink NU516U1 wireless.cgi WifiBasic os command injectionEPSS 8.5%CVE-2024-34544CRITICALA command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafteEPSS 8.5%CVE-2026-2527MEDIUMWavlink WL-WN579A3 login.cgi command injectionEPSS 8.5%CVE-2026-2529MEDIUMWavlink WL-WN579A3 wireless.cgi DeleteMac command injectionEPSS 8.5%CVE-2024-39367CRITICALAn os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505.EPSS 8.2%CVE-2026-2528MEDIUMWavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injectionEPSS 8.2%CVE-2026-2526MEDIUMWavlink WL-WN579A3 wireless.cgi multi_ssid command injectionEPSS 8.2%CVE-2026-2530MEDIUMWavlink WL-WN579A3 wireless.cgi AddMac command injectionEPSS 8.2%CVE-2024-39759CRITICALMultiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A spEPSS 8.2%CVE-2024-39761CRITICALMultiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A spEPSS 8.2%