Wavlink vulnerabilities
165 published CVEs name Wavlink among the affected products.
- Published CVEs
- 165
- Last 12 months
- 75
- Critical
- 94
- Known exploited
- 0
Critical 94High 22Medium 49Low 0Not scored 0
CVEs per yearBy the year they were published
- 20226
- 20231
- 202517
- 202566
- 202675
Newest CVEs
- CVE-2026-120345
WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection
WAVLINK · WN551X3-A
Critical10.0 - CVE-2026-120344
WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection
WAVLINK · WN551X3-A
Critical10.0 - CVE-2026-120282
WAVLINK WN536AX6-A protocol.csp host_black os command injection
WAVLINK · WN536AX6-A
Critical9.4 - CVE-2026-120281
WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow
WAVLINK · WN536AX6-A
Critical10.0 - CVE-2026-120280
WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection
WAVLINK · WN536AX6-A
Critical10.0 - CVE-2026-120279
WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection
WAVLINK · WN536AX6-A
Critical10.0 - CVE-2026-120278
WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication
WAVLINK · WN536AX6-A
Medium6.9 - CVE-2026-120277
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
WAVLINK · WN536AX6-A
Critical10.0 - CVE-2026-120276
WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
WAVLINK · WN536AX6-A
Critical10.0 - CVE-2026-120240
WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection
WAVLINK · WN553X1-B
Critical9.4
Products with the most CVEs
Most common weaknesses
- CWE-77 Command injection83
- CWE-78 OS command injection41
- CWE-74 Injection36
- CWE-121 Stack-based buffer overflow21
- CWE-120 Classic buffer overflow18
- CWE-119 Memory buffer bounds error17
- CWE-15 12
- CWE-306 Missing authentication for a critical function4
- CWE-787 Out-of-bounds write4
- CWE-79 Cross-site scripting (XSS)4