WAVLINK vulnerabilities
We track 175 vulnerabilities in WAVLINK products across 60+ products. 175 are rated high or critical, and none are known to be exploited. The most recent was published on November 2, 2026.
Latest WAVLINK vulnerabilities
- 10.0 Critical severity
WN551X3-A: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation of the argument data results in os command injection. It is p
- 10.0 Critical severity
WN551X3-A: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. The a
- 9.9 Critical severity
WN536AX6-A: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been
- 10.0 Critical severity
WN536AX6-A: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched
- 10.0 Critical severity
WN536AX6-A: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command inject
- 10.0 Critical severity
WN536AX6-A: Improper Neutralization of Special Elements used in a Command
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can b
- 10.0 Critical severity
WN536AX6-A: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command inje
- 10.0 Critical severity
WN536AX6-A: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection. It
- 9.9 Critical severity
WN553X1-B: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os comman
- 9.9 Critical severity
WN553X1-B: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command injection. Th
- 9.9 Critical severity
WN553X1-B: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack can be executed
- 9.9 Critical severity
WN553X1-B: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection. It is possible
- 9.9 Critical severity
WN701AE: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name results in os command injection. The attack may be performed from remote. The exploit has
- 9.1 Critical severity
WN553X1-B: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carried out remotely. The e
- 9.9 Critical severity
WN553X1-B: Improper Neutralization of Special Elements used in a Command
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The
- 9.9 Critical severity
WN701AE: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in WAVLINK WN701AE M01AE_V260105. This affects the function del_staticrule of the file static_route_setting.sh of the component ioos Web Backend. Performing a manipulation of the argument rule_name results in os command injection.
- 10.0 Critical severity
WL-WN530BE1-A: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remo
- 9.9 Critical severity
WL-WN530HG4B: Improper Neutralization of Special Elements used in a Command
A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has b
- 9.9 Critical severity
WN579X3-D: Improper Neutralization of Special Elements used in a Command
A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The exploit is now
- 10.0 Critical severity
WL-WN579A3-A: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in WAVLINK WL-WN579A3-A 2026-03-10-94f93d4. The impacted element is the function set_wzdgwMesh of the file /cgi-bin/adm.cgi of the component Initial Setup Wizard. The manipulation of the argument wlan_ssid leads to os
- 9.8 Critical severity
WL-WN530BE1-A: Improper Neutralization of Special Elements used in an OS Command
Wavlink WL-WN530BE1-A firmware through M30BE1_V251117 contains an OS command injection vulnerability in the sub_23B54 function of the ioos binary, which passes the unsanitized file_id parameter of /protocol.csp?opt=ovpn_file requests with type=del to popen().
- 10.0 Critical severity
WN530HG4B: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made pub
- 10.0 Critical severity
WL-WN530BE2-A: Improper Neutralization of Special Elements used in a Command
A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTE_ADDR leads to os command injection. It i
- 10.0 Critical severity
WL-WN592AX6: Improper Neutralization of Special Elements used in a Command
A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published a
- 10.0 Critical severity
WL-WN530BE1-A: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_COOKIE/X-Cmd results in
- 9.9 Critical severity
WL-WN530BE1-A: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be performed from remote. The e
- 10.0 Critical severity
WN531P3: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was determined in Wavlink WN531P3 and WN535M1 V250922. Affected by this vulnerability is the function strcpy of the file /etc/lighttpd/www/cgi-bin/export_pingortrace.cgi of the component Export Pingortrace CGI. Executing a manipulation of the a
- 8.8 High severity
WN572: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the c
- 9.8 Critical severity
WL-NU516U1: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_password of the file nas.cgi. The manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack can be executed remotely. The exploit
- 9.8 Critical severity
WL-NU516U1: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENT_LENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You s
- 7.5 High severity
WL-NU516U1: Improper Neutralization of Special Elements used in a Command
A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulation of the argument Password can lead to os command injection. The attack may be launched remotely. Thi
- 8.8 High severity
WL-NU516U1-A: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the function sub_407504 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. Such manipulation of the argument Guest_ssid leads to stack-based b
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in an OS Command
A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of th
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the pu
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/wl_Pass is directly passed by the attacker/so we can control
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The e
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway is directly passed by the attacke
- 8.8 High severity
NU516U1: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is p