Skip to content
WAVLINK
Products
| Product | CVEs | Exploited | Latest |
|---|
| Wavlink AC3000 | 62 | – | Jan 14, 2025 |
| NU516U1 | 18 | – | May 10, 2026 |
| WL-NU516U1 | 17 | – | Aug 3, 2026 |
| WL-WN578W2 | 10 | – | Mar 22, 2026 |
| WN536AX6-A | 7 | – | Nov 2, 2026 |
| WL-WN579A3 | 7 | – | Apr 19, 2026 |
| WN553X1-B | 6 | – | Nov 1, 2026 |
| WN572HG3 | 4 | – | Oct 27, 2024 |
| WN530HG4 | 4 | – | Oct 27, 2024 |
| WL-WN530BE1-A | 4 | – | Nov 1, 2026 |
| WN530H4 | 4 | – | Oct 27, 2024 |
| WN535K3 | 3 | – | Jul 20, 2022 |
| WN535K2 | 3 | – | Jul 20, 2022 |
| WL-WN570HA1 | 3 | – | May 3, 2026 |
| WL-WN579X3-C | 3 | – | Mar 28, 2026 |
| WN531G3 | 3 | – | Sep 13, 2022 |
| WN701AE | 2 | – | Nov 1, 2026 |
| WN551X3-A | 2 | – | Nov 2, 2026 |
| WL-WN592AX6 | 2 | – | Oct 13, 2026 |
| WL-NU516U1-A | 2 | – | Jun 29, 2026 |
| WN551 | 1 | – | Aug 3, 2026 |
| WN557 | 1 | – | Aug 3, 2026 |
| WN570H | 1 | – | Aug 3, 2026 |
| etc. WN529 | 1 | – | Aug 3, 2026 |
| WN573 | 1 | – | Aug 3, 2026 |
| WN579X3 | 1 | – | Jun 23, 2023 |
| WN579X3-D | 1 | – | Nov 1, 2026 |
| WN572 | 1 | – | Aug 3, 2026 |
| NU516 | 1 | – | Aug 3, 2026 |
| QUANTUM D2G | 1 | – | Jun 1, 2025 |
| QUANTUM D3G | 1 | – | Jun 1, 2025 |
| WL-WN530BE2-A | 1 | – | Oct 15, 2026 |
| WL-WN530G3A | 1 | – | Jun 1, 2025 |
| WL-WN530H4 | 1 | – | Apr 17, 2026 |
| WL-WN530HG3 | 1 | – | Jun 1, 2025 |
| WL-WN530HG4B | 1 | – | Nov 1, 2026 |
| WL-WN532A3 | 1 | – | Jun 1, 2025 |
| WL-WN576K1 | 1 | – | Jun 1, 2025 |
| WL-WN579A3-A | 1 | – | Nov 1, 2026 |
| WN529 | 1 | – | Aug 3, 2026 |
| WN530 | 1 | – | Aug 3, 2026 |
| WN530HG4B | 1 | – | Oct 15, 2026 |
| WN531 | 1 | – | Aug 3, 2026 |
| WN531P3 | 1 | – | Aug 17, 2026 |
| WN535 | 1 | – | Aug 3, 2026 |
| WN535M1 | 1 | – | Aug 17, 2026 |
| WN536 | 1 | – | Aug 3, 2026 |
Exploited and recent CVEs
-
CVE-2026-120345
Critical 10.0
WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection
2.0%
-
CVE-2026-120344
Critical 10.0
WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection
2.0%
-
CVE-2026-120282
Critical 9.9
WAVLINK WN536AX6-A protocol.csp host_black os command injection
1.7%
-
CVE-2026-120281
Critical 10.0
WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow
0.6%
-
CVE-2026-120280
Critical 10.0
WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection
2.0%
-
CVE-2026-120279
Critical 10.0
WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection
2.0%
-
CVE-2026-120278
Medium 5.3
WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication
0.4%
-
CVE-2026-120277
Critical 10.0
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
2.5%
-
CVE-2026-120276
Critical 10.0
WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
3.2%
-
CVE-2026-120240
Critical 9.9
WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection
1.7%
-
CVE-2026-120239
Critical 9.9
WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection
1.7%
-
CVE-2026-120238
Critical 9.9
WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection
1.7%
-
CVE-2026-120231
Critical 9.9
WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection
1.7%
-
CVE-2026-120230
Critical 9.9
WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection
2.2%
-
CVE-2026-120229
Critical 9.1
WAVLINK WN553X1-B ioos sub_416B50 os command injection
2.8%
-
CVE-2026-120228
Critical 9.9
WAVLINK WN553X1-B ioos Service sub_416D88 os command injection
1.7%
-
CVE-2026-120227
Critical 9.9
WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection
2.2%
-
CVE-2026-120198
Critical 10.0
WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection
2.1%
-
CVE-2026-120197
Critical 9.9
WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection
1.7%
-
CVE-2026-120196
Critical 9.9
WAVLINK WN579X3-D wapi.cgi port_forward os command injection
1.7%
-
CVE-2026-120195
Critical 10.0
WAVLINK WL-WN579A3-A Initial Setup Wizard adm.cgi set_wzdgwMesh os command injection
2.1%
-
CVE-2026-113802
Critical 9.8
Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler
3.5%
-
CVE-2026-110958
Critical 10.0
Wavlink WN530HG4B api.cgi heap-based overflow
1.0%
-
CVE-2026-110957
Critical 10.0
Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection
3.1%
-
CVE-2026-109110
Critical 10.0
Wavlink WL-WN592AX6 wmapd system os command injection
2.0%
-
CVE-2026-109109
Critical 10.0
Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow
0.6%
-
CVE-2026-109108
Critical 9.9
Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection
1.7%
-
CVE-2026-109107
Medium 6.5
Wavlink WL-WN592AX6 upload.cgi main null pointer dereference
0.4%
-
CVE-2026-74843
Critical 10.0
Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow
1.0%
-
CVE-2026-74843
Critical 10.0
Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow
1.0%