Vulnerabilidades em WAVLINK
137 resultadosAnálise Vexday
Wavlink acumula 11 vulnerabilidades catalogadas, sendo 1 de severidade crítica, mas nenhuma sob exploração ativa conhecida até o momento. A fraqueza dominante é CWE-77 (command injection), padrão típico em dispositivos de rede, e o risco não é recente — ausência de divulgações nos últimos 90 dias sugere que a base de vulnerabilidades é estabilizada e de menor dinâmica de descoberta.
CVE-2026-2565HIGHWavlink WL-NU516U1 adm.cgi sub_40785C stack-based overflowEPSS 1.0%CVE-2026-2566HIGHWavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflowEPSS 0.9%CVE-2024-39802CRITICALMultiple buffer overflow vulnerabilities exist in the qos.cgi qos_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 0.9%CVE-2024-39769CRITICALMultiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V5030.210505. A speciallyEPSS 0.9%CVE-2026-13539HIGHWavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflowEPSS 0.9%CVE-2025-5408CRITICALWAVLINK WL-WN576K1 HTTP POST Request login.cgi sys_login buffer overflowEPSS 0.8%CVE-2022-40621—WAVLINK Quantum D4G (WN531G3) Pass-The-HashEPSS 0.8%CVE-2026-18607HIGHWavlink NU516 lighttpd upload.cgi strcpy stack-based overflowEPSS 0.8%CVE-2024-39773MEDIUMAn information disclosure vulnerability exists in the testsave.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTEPSS 0.8%CVE-2022-40622—WAVLINK Quantum D4G (WN531G3) Session Management by IP AddressEPSS 0.7%CVE-2022-40623—WAVLINK Quantum D4G (WN531G3) CSRFEPSS 0.7%CVE-2025-10321MEDIUMWavlink WL-WN578W2 live_online.shtml information disclosureEPSS 0.5%CVE-2025-10322MEDIUMWavlink WL-WN578W2 sysinit.html password recoveryEPSS 0.5%CVE-2026-6559MEDIUMWavlink WL-WN579A3 login.cgi sub_401F80 cross site scriptingEPSS 0.4%CVE-2026-4544MEDIUMWavlink WL-WN578W2 POST Request login.cgi cross site scriptingEPSS 0.4%CVE-2026-3716MEDIUMWavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scriptingEPSS 0.4%CVE-2026-4166MEDIUMWavlink WL-NU516U1 login.cgi sub_404F68 cross site scriptingEPSS 0.3%