Browse all 165 CVE security advisories affecting WAVLINK. AI-powered Chinese analysis, POCs, and references for each vulnerability.
WAVLINK operates primarily as a manufacturer of consumer networking hardware, specializing in Wi-Fi routers, range extenders, and USB adapters for home and small office environments. Security audits have identified a significant volume of vulnerabilities within its firmware ecosystem, with 119 Common Vulnerabilities and Exposures currently recorded. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from inadequate input validation and weak authentication mechanisms in web management interfaces. While the company has not been the subject of a singular, widely publicized catastrophic breach comparable to major IoT botnets, the sheer number of disclosed CVEs indicates systemic weaknesses in its secure development lifecycle. Many of these vulnerabilities allow unauthenticated attackers to gain administrative control or execute arbitrary commands, posing substantial risks to user privacy and network integrity.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-120240 | WAVLINK WN553X1-B WireGuard CLI Group ioos sub_41A748 os command injection — WN553X1-B CWE-78 | 9.9 | Critical | 2026-11-01 |
| CVE-2026-120239 | WAVLINK WN553X1-B WireGuard CLI ioos sub_419DA8 os command injection — WN553X1-B CWE-78 | 9.9 | Critical | 2026-11-01 |
| CVE-2026-120238 | WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection — WN553X1-B CWE-78 | 9.9 | Critical | 2026-11-01 |
| CVE-2026-120231 | WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection — WN553X1-B CWE-78 | 9.9 | Critical | 2026-11-01 |
| CVE-2026-120229 | WAVLINK WN553X1-B ioos sub_416B50 os command injection — WN553X1-B CWE-78 | 9.1 | Critical | 2026-11-01 |
| CVE-2026-120228 | WAVLINK WN553X1-B ioos Service sub_416D88 os command injection — WN553X1-B CWE-78 | 9.9 | Critical | 2026-11-01 |
This page lists every published CVE security advisory associated with WAVLINK. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.