W
Vendor security profile
wavlink
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs28
Critical6
CISA KEV0
Public exploit22
Patch rate%14
Avg. CVSS8.5
12-month vulnerability rate
0
0
0
0
0
0
9
0
0
6
0
4
CVE KEV
CVE severity distribution
28toplam CVE
Critical6 (21%)
High18 (64%)
Medium4 (14%)
Patch and exploitation view
%14
Verified patch
%0
CISA KEV
%79
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
24Unknown
Latest vulnerabilities
10.0
CVE-2026-109110
Wavlink WL-WN592AX6 wmapd system os command injection
W
Patch status unknown
10.0
CVE-2026-109109
Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow
W
Patch status unknown
9.4
CVE-2026-109108
Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection
W
Patch status unknown
6.9
CVE-2026-109107
Wavlink WL-WN592AX6 upload.cgi main null pointer dereference
W
Patch status unknown
9.3
CVE-2026-89010
WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server
WT
Patch verifiedEPSS %3
8.8
CVE-2026-89009
WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server
WT
Patch verifiedEPSS %1
10.0
CVE-2026-74843
Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow
W
Patch status unknownEPSS %1
8.7
CVE-2026-18607
Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow
W
Patch status unknownEPSS %1
5.3
CVE-2026-18590
Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection
W
Patch verifiedEPSS %2
9.3
CVE-2026-18589
Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow
W
Patch verifiedEPSS %1