Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

WAVLINK — Vulnerabilities & Security Advisories 165

Browse all 165 CVE security advisories affecting WAVLINK. AI-powered Chinese analysis, POCs, and references for each vulnerability.

WAVLINK operates primarily as a manufacturer of consumer networking hardware, specializing in Wi-Fi routers, range extenders, and USB adapters for home and small office environments. Security audits have identified a significant volume of vulnerabilities within its firmware ecosystem, with 119 Common Vulnerabilities and Exposures currently recorded. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from inadequate input validation and weak authentication mechanisms in web management interfaces. While the company has not been the subject of a singular, widely publicized catastrophic breach comparable to major IoT botnets, the sheer number of disclosed CVEs indicates systemic weaknesses in its secure development lifecycle. Many of these vulnerabilities allow unauthenticated attackers to gain administrative control or execute arbitrary commands, posing substantial risks to user privacy and network integrity.

Found 18 results / 165 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-8230 Wavlink NU516U1 login.cgi sys_login1 os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-10
CVE-2026-8229 Wavlink NU516U1 wireless.cgi WifiBasic os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-10
CVE-2026-8228 Wavlink NU516U1 wireless.cgi advance os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-10
CVE-2026-8227 Wavlink NU516U1 adm.cgi wzdapMesh os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-10
CVE-2026-8192 Wavlink NU516U1 adm.cgi wzdap os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-09
CVE-2026-8191 Wavlink NU516U1 adm.cgi wifi_region os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-09
CVE-2026-8190 Wavlink NU516U1 adm.cgi wan os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-09
CVE-2026-8189 Wavlink NU516U1 adm.cgi wzdrepeater os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-09
CVE-2026-8188 Wavlink NU516U1 adm.cgi change_wifi_password os command injection — NU516U1 CWE-78 6.3 Medium 2026-05-09
CVE-2026-3703 Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write — NU516U1 CWE-787 9.8 Critical 2026-03-08
CVE-2026-3704 Wavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection — NU516U1 CWE-77 4.7 Medium 2026-03-08
CVE-2025-10964 Wavlink NU516U1 firewall.cgi sub_401B30 command injection — NU516U1 CWE-77 6.3 Medium 2025-09-25
CVE-2025-10963 Wavlink NU516U1 firewall.cgi sub_4016F0 command injection — NU516U1 CWE-77 6.3 Medium 2025-09-25
CVE-2025-10962 Wavlink NU516U1 SetName wireless.cgi sub_403198 command injection — NU516U1 CWE-77 6.3 Medium 2025-09-25
CVE-2025-10961 Wavlink NU516U1 Delete_Mac_list wireless.cgi sub_4030C0 command injection — NU516U1 CWE-77 5.5 Medium 2025-09-25
CVE-2025-10960 Wavlink NU516U1 DeleteMac wireless.cgi sub_402D1C command injection — NU516U1 CWE-77 6.3 Medium 2025-09-25
CVE-2025-10959 Wavlink NU516U1 firewall.cgi sub_401778 command injection — NU516U1 CWE-77 6.3 Medium 2025-09-25
CVE-2025-10958 Wavlink NU516U1 AddMac wireless.cgi sub_403010 command injection — NU516U1 CWE-77 6.3 Medium 2025-09-25

This page lists every published CVE security advisory associated with WAVLINK. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.