Browse all 165 CVE security advisories affecting WAVLINK. AI-powered Chinese analysis, POCs, and references for each vulnerability.
WAVLINK operates primarily as a manufacturer of consumer networking hardware, specializing in Wi-Fi routers, range extenders, and USB adapters for home and small office environments. Security audits have identified a significant volume of vulnerabilities within its firmware ecosystem, with 119 Common Vulnerabilities and Exposures currently recorded. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from inadequate input validation and weak authentication mechanisms in web management interfaces. While the company has not been the subject of a singular, widely publicized catastrophic breach comparable to major IoT botnets, the sheer number of disclosed CVEs indicates systemic weaknesses in its secure development lifecycle. Many of these vulnerabilities allow unauthenticated attackers to gain administrative control or execute arbitrary commands, posing substantial risks to user privacy and network integrity.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-120282 | WAVLINK WN536AX6-A protocol.csp host_black os command injection — WN536AX6-A CWE-78 | 9.9 | Critical | 2026-11-02 |
| CVE-2026-120281 | WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow — WN536AX6-A CWE-121 | 10.0 | Critical | 2026-11-02 |
| CVE-2026-120280 | WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection — WN536AX6-A CWE-78 | 10.0 | Critical | 2026-11-02 |
| CVE-2026-120279 | WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection — WN536AX6-A CWE-78 | 10.0 | Critical | 2026-11-02 |
| CVE-2026-120278 | WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication — WN536AX6-A CWE-306 | 5.3 | Medium | 2026-11-01 |
| CVE-2026-120277 | WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection — WN536AX6-A CWE-78 | 10.0 | Critical | 2026-11-01 |
| CVE-2026-120276 | WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection — WN536AX6-A CWE-78 | 10.0 | Critical | 2026-11-01 |
This page lists every published CVE security advisory associated with WAVLINK. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.