WN535M1 vulnerabilities

2 known vulnerabilities in WN535M1 from WAVLINK Technology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  WN535M1: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-89010Sep 11, 2026WAVLINK TechnologyEPSS 3.17%

  WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync_server daemon

• 9.1 Critical severity

  WN535M1: Absolute Path Traversal

  CVE-2026-89009Sep 11, 2026WAVLINK TechnologyEPSS 1.01%

  WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the sync_server daemon on