Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Wavlink — Vulnerabilities & Security Advisories 136

Browse all 136 CVE security advisories affecting Wavlink. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WAVLINK operates primarily as a manufacturer of consumer networking hardware, specializing in Wi-Fi routers, range extenders, and USB adapters for home and small office environments. Security audits have identified a significant volume of vulnerabilities within its firmware ecosystem, with 119 Common Vulnerabilities and Exposures currently recorded. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from inadequate input validation and weak authentication mechanisms in web management interfaces. While the company has not been the subject of a singular, widely publicized catastrophic breach comparable to major IoT botnets, the sheer number of disclosed CVEs indicates systemic weaknesses in its secure development lifecycle. Many of these vulnerabilities allow unauthenticated attackers to gain administrative control or execute arbitrary commands, posing substantial risks to user privacy and network integrity.

CVE IDTitleCVSSSeverityPublished
CVE-2026-18607 Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow — WN572CWE-121 8.8 High2026-08-03
CVE-2026-18590 Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection — WL-NU516U1CWE-78 6.3 Medium2026-08-03
CVE-2026-18589 Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow — WL-NU516U1CWE-121 9.8 Critical2026-08-03
CVE-2026-18588 Wavlink WL-NU516U1 nas.cgi fgets stack-based overflow — WL-NU516U1CWE-121 9.8 Critical2026-08-03
CVE-2026-18587 Wavlink WL-NU516U1 Config Import os command injection — WL-NU516U1CWE-78 7.5 High2026-08-03
CVE-2026-15513 Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection — WL-NU516U1CWE-78 6.3 Medium2026-07-12
CVE-2026-13539 Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow — WL-NU516U1-ACWE-121 8.8 High2026-06-29
CVE-2026-13538 Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection — WL-NU516U1-ACWE-77 6.3 Medium2026-06-29
CVE-2026-8230 Wavlink NU516U1 login.cgi sys_login1 os command injection — NU516U1CWE-78 6.3 Medium2026-05-10
CVE-2026-8229 Wavlink NU516U1 wireless.cgi WifiBasic os command injection — NU516U1CWE-78 6.3 Medium2026-05-10
CVE-2026-8228 Wavlink NU516U1 wireless.cgi advance os command injection — NU516U1CWE-78 6.3 Medium2026-05-10
CVE-2026-8227 Wavlink NU516U1 adm.cgi wzdapMesh os command injection — NU516U1CWE-78 6.3 Medium2026-05-10
CVE-2026-8192 Wavlink NU516U1 adm.cgi wzdap os command injection — NU516U1CWE-78 6.3 Medium2026-05-09
CVE-2026-8191 Wavlink NU516U1 adm.cgi wifi_region os command injection — NU516U1CWE-78 6.3 Medium2026-05-09
CVE-2026-8190 Wavlink NU516U1 adm.cgi wan os command injection — NU516U1CWE-78 6.3 Medium2026-05-09
CVE-2026-8189 Wavlink NU516U1 adm.cgi wzdrepeater os command injection — NU516U1CWE-78 6.3 Medium2026-05-09
CVE-2026-8188 Wavlink NU516U1 adm.cgi change_wifi_password os command injection — NU516U1CWE-78 6.3 Medium2026-05-09
CVE-2026-7692 Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection — WL-WN570HA1CWE-77 6.3 Medium2026-05-03
CVE-2026-7691 Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection — WL-WN570HA1CWE-77 6.3 Medium2026-05-03
CVE-2026-7690 Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection — WL-WN570HA1CWE-77 6.3 Medium2026-05-03
CVE-2026-6559 Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting — WL-WN579A3CWE-79 4.3 Medium2026-04-19
CVE-2026-6483 Wavlink WL-WN530H4 internet.cgi snprintf os command injection — WL-WN530H4CWE-78 7.2 High2026-04-17
CVE-2026-5004 Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow — WL-WN579X3-CCWE-121 8.8 High2026-03-28
CVE-2026-4861 Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow — WL-NU516U1CWE-121 8.8 High2026-03-26
CVE-2026-4544 Wavlink WL-WN578W2 POST Request login.cgi cross site scripting — WL-WN578W2CWE-79 2.4 Low2026-03-22
CVE-2026-4543 Wavlink WL-WN578W2 POST Request firewall.cgi command injection — WL-WN578W2CWE-77 6.3 Medium2026-03-22
CVE-2026-4166 Wavlink WL-NU516U1 login.cgi sub_404F68 cross site scripting — WL-NU516U1CWE-79 3.5 Low2026-03-15
CVE-2026-4164 Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection — WL-WN578W2CWE-77 9.8 Critical2026-03-15
CVE-2026-4163 Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection — WL-WN579A3CWE-77 9.8 Critical2026-03-14
CVE-2026-3716 Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scripting — WL-WN579X3-CCWE-79 2.4 Low2026-03-08

This page lists every published CVE security advisory associated with Wavlink. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.