Browse all 165 CVE security advisories affecting WAVLINK. AI-powered Chinese analysis, POCs, and references for each vulnerability.
WAVLINK operates primarily as a manufacturer of consumer networking hardware, specializing in Wi-Fi routers, range extenders, and USB adapters for home and small office environments. Security audits have identified a significant volume of vulnerabilities within its firmware ecosystem, with 119 Common Vulnerabilities and Exposures currently recorded. These flaws predominantly involve remote code execution, cross-site scripting, and privilege escalation issues, often stemming from inadequate input validation and weak authentication mechanisms in web management interfaces. While the company has not been the subject of a singular, widely publicized catastrophic breach comparable to major IoT botnets, the sheer number of disclosed CVEs indicates systemic weaknesses in its secure development lifecycle. Many of these vulnerabilities allow unauthenticated attackers to gain administrative control or execute arbitrary commands, posing substantial risks to user privacy and network integrity.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-120230 | WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection — WN701AE CWE-78 | 9.9 | Critical | 2026-11-01 |
| CVE-2026-120227 | WAVLINK WN701AE ioos Web Backend static_route_setting.sh del_staticrule os command injection — WN701AE CWE-78 | 9.9 | Critical | 2026-11-01 |
This page lists every published CVE security advisory associated with WAVLINK. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.