Home / CVEs we hold for Wavlink CVEs we hold for Wavlink Records whose assigning authority named Wavlink as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-89010 WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server WAVLINK Technology WN535M3 CVE-2026-89009 WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server WAVLINK Technology WN535M3 CVE-2026-8230 Wavlink NU516U1 login.cgi sys_login1 os command injection Wavlink NU516U1 CVE-2026-8229 Wavlink NU516U1 wireless.cgi WifiBasic os command injection Wavlink NU516U1 CVE-2026-8228 Wavlink NU516U1 wireless.cgi advance os command injection Wavlink NU516U1 CVE-2026-8227 Wavlink NU516U1 adm.cgi wzdapMesh os command injection Wavlink NU516U1 CVE-2026-8192 Wavlink NU516U1 adm.cgi wzdap os command injection Wavlink NU516U1 CVE-2026-8191 Wavlink NU516U1 adm.cgi wifi_region os command injection Wavlink NU516U1 CVE-2026-8190 Wavlink NU516U1 adm.cgi wan os command injection Wavlink NU516U1 CVE-2026-8189 Wavlink NU516U1 adm.cgi wzdrepeater os command injection Wavlink NU516U1 CVE-2026-8188 Wavlink NU516U1 adm.cgi change_wifi_password os command injection Wavlink NU516U1 CVE-2026-7692 Wavlink WL-WN570HA1 adm.cgi ping_ddns command injection Wavlink WL-WN570HA1 CVE-2026-7691 Wavlink WL-WN570HA1 adm.cgi set_sys_cmd command injection Wavlink WL-WN570HA1 CVE-2026-7690 Wavlink WL-WN570HA1 adm.cgi set_sys_adm command injection Wavlink WL-WN570HA1 CVE-2026-74843 Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow Wavlink WN535M1 CVE-2026-6559 Wavlink WL-WN579A3 login.cgi sub_401F80 cross site scripting Wavlink WL-WN579A3 CVE-2026-6483 Wavlink WL-WN530H4 internet.cgi snprintf os command injection Wavlink WL-WN530H4 CVE-2026-5004 Wavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflow Wavlink WL-WN579X3-C CVE-2026-4861 Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow Wavlink WL-NU516U1 CVE-2026-4544 Wavlink WL-WN578W2 POST Request login.cgi cross site scripting Wavlink WL-WN578W2 CVE-2026-4543 Wavlink WL-WN578W2 POST Request firewall.cgi command injection Wavlink WL-WN578W2 CVE-2026-4166 Wavlink WL-NU516U1 login.cgi sub_404F68 cross site scripting Wavlink WL-NU516U1 CVE-2026-4164 Wavlink WL-WN578W2 POST Request wireless.cgi GuestWifi command injection Wavlink WL-WN578W2 CVE-2026-4163 Wavlink WL-WN579A3 POST Request wireless.cgi GuestWifi command injection Wavlink WL-WN579A3 CVE-2026-3716 Wavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scripting Wavlink WL-WN579X3-C CVE-2026-3715 Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflow Wavlink WL-WN579X3-C CVE-2026-3704 Wavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection Wavlink NU516U1 CVE-2026-3703 Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write Wavlink NU516U1 CVE-2026-3662 Wavlink WL-NU516U1 adm.cgi usb_p910 command injection Wavlink WL-NU516U1 CVE-2026-3661 Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection Wavlink WL-NU516U1 CVE-2026-3613 Wavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflow Wavlink WL-NU516U1 CVE-2026-3612 Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection Wavlink WL-NU516U1 CVE-2026-2615 Wavlink WL-NU516U1 firewall.cgi singlePortForwardDelete command injection Wavlink WL-NU516U1 CVE-2026-2567 Wavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflow Wavlink WL-NU516U1 CVE-2026-2566 Wavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflow Wavlink WL-NU516U1 CVE-2026-2565 Wavlink WL-NU516U1 adm.cgi sub_40785C stack-based overflow Wavlink WL-NU516U1 CVE-2026-2530 Wavlink WL-WN579A3 wireless.cgi AddMac command injection Wavlink WL-WN579A3 CVE-2026-2529 Wavlink WL-WN579A3 wireless.cgi DeleteMac command injection Wavlink WL-WN579A3 CVE-2026-2528 Wavlink WL-WN579A3 wireless.cgi Delete_Mac_list command injection Wavlink WL-WN579A3 CVE-2026-2527 Wavlink WL-WN579A3 login.cgi command injection Wavlink WL-WN579A3 CVE-2026-2526 Wavlink WL-WN579A3 wireless.cgi multi_ssid command injection Wavlink WL-WN579A3 CVE-2026-18607 Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow Wavlink NU516 CVE-2026-18590 Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection Wavlink WL-NU516U1 CVE-2026-18589 Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow Wavlink WL-NU516U1 CVE-2026-18588 Wavlink WL-NU516U1 nas.cgi fgets stack-based overflow Wavlink WL-NU516U1 CVE-2026-18587 Wavlink WL-NU516U1 Config Import os command injection Wavlink WL-NU516U1 CVE-2026-15513 Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection Wavlink WL-NU516U1 CVE-2026-13539 Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow Wavlink WL-NU516U1-A CVE-2026-13538 Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection Wavlink WL-NU516U1-A CVE-2025-9149 Wavlink WL-NU516U1 wireless.cgi sub_4032E4 command injection Wavlink WL-NU516U1 CVE-2025-5408 WAVLINK WL-WN576K1 HTTP POST Request login.cgi sys_login buffer overflow WAVLINK WL-WN576K1 CVE-2025-10964 Wavlink NU516U1 firewall.cgi sub_401B30 command injection Wavlink NU516U1 CVE-2025-10963 Wavlink NU516U1 firewall.cgi sub_4016F0 command injection Wavlink NU516U1 CVE-2025-10962 Wavlink NU516U1 SetName wireless.cgi sub_403198 command injection Wavlink NU516U1 CVE-2025-10961 Wavlink NU516U1 Delete_Mac_list wireless.cgi sub_4030C0 command injection Wavlink NU516U1 CVE-2025-10960 Wavlink NU516U1 DeleteMac wireless.cgi sub_402D1C command injection Wavlink NU516U1 CVE-2025-10959 Wavlink NU516U1 firewall.cgi sub_401778 command injection Wavlink NU516U1 CVE-2025-10958 Wavlink NU516U1 AddMac wireless.cgi sub_403010 command injection Wavlink NU516U1 CVE-2025-10775 Wavlink WL-NU516U1 login.cgi sub_4012A0 os command injection Wavlink WL-NU516U1 CVE-2025-10359 Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injection Wavlink WL-WN578W2 CVE-2025-10358 Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection Wavlink WL-WN578W2 CVE-2025-10325 Wavlink WL-WN578W2 login.cgi sub_401BA4 command injection Wavlink WL-WN578W2 CVE-2025-10324 Wavlink WL-WN578W2 firewall.cgi sub_401C5C command injection Wavlink WL-WN578W2 CVE-2025-10323 Wavlink WL-WN578W2 wizard_rep.shtml sub_409184 command injection Wavlink WL-WN578W2 CVE-2025-10322 Wavlink WL-WN578W2 sysinit.html password recovery Wavlink WL-WN578W2 CVE-2025-10321 Wavlink WL-WN578W2 live_online.shtml information disclosure Wavlink WL-WN578W2 CVE-2024-10429 WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi set_ipv6 command injection WAVLINK WN572HG3 CVE-2024-10428 WAVLINK WN530H4/WN530HG4/WN572HG3 firewall.cgi set_ipv6 command injection WAVLINK WN572HG3 CVE-2024-10194 WAVLINK WN530H4/WN530HG4/WN572HG3 Front-End Authentication Page login.cgi Goto_chidx stack-based overflow WAVLINK WN572HG3 CVE-2024-10193 WAVLINK WN530H4/WN530HG4/WN572HG3 internet.cgi ping_ddns command injection WAVLINK WN572HG3 CVE-2023-3380 Wavlink WN579X3 Ping Test adm.cgi injection Wavlink WN579X3 CVE-2022-40622 WAVLINK Quantum D4G (WN531G3) Session Management by IP Address WAVLINK WN531G3 CVE-2022-40621 WAVLINK Quantum D4G (WN531G3) Pass-The-Hash WAVLINK WN531G3 CVE-2022-2488 WAVLINK WN535K2/WN535K3 touchlist_sync.cgi os command injection WAVLINK WN535K3 CVE-2022-2487 WAVLINK WN535K2/WN535K3 nightled.cgi os command injection WAVLINK WN535K3 CVE-2022-2486 WAVLINK WN535K2/WN535K3 os command injection WAVLINK WN535K3 144 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.