CyberSecBulletin

Wavelog vulnerabilities

We track 1 vulnerability in Wavelog products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2026.

1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score

Latest Wavelog vulnerabilities

  • 9.3 Critical severity

    wavelog: Improper Control of Generation of Code

    CVE-2026-54237Wavelog

    Wavelog is web-based amateur radio logging software. From 1.8 until 2.4.2, Wavelog exposes /install/ajax.php and /install/includes/interface_assets/triggers.php after installation without an installation lock or permission check. Unsanitized input reaches writ