WAVLINK Technology vulnerabilities
We track 6 vulnerabilities in WAVLINK Technology products across 3 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 11, 2026.
Latest WAVLINK Technology vulnerabilities
- 9.8 Critical severity
WN535M1: Improper Neutralization of Special Elements used in an OS Command
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync_server daemon
- 9.1 Critical severity
WN535M1: Absolute Path Traversal
WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the sync_server daemon on
- 7.2 High severity
WL-WN531AX2: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements in WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to execute OS commands with the root privilege.
- 7.2 High severity
WL-WN531AX2: Unrestricted Upload of File with Dangerous Type
WL-WN531AX2 firmware versions prior to 2023526 allows an attacker with an administrative privilege to upload arbitrary files and execute OS commands with the root privilege.
- 8.1 High severity
WL-WN531AX2: Exposure of Resource to Wrong Sphere
Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in.
- 7.2 High severity
WL-WN531AX2: Reliance on Cookies without Validation and Integrity Checking
Client-side enforcement of server-side security issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow an attacker with an administrative privilege to execute OS commands with the root privilege.