CVE Tools
Track your stack

Wavlink

174 CVEs tracked since 2020. Since Oct 2020, none of them reached CISA KEV.

Wavlink CVEs per month

Oct 2020 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Wavlink CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2020-1050
2020-111 or fewer
2020-122 or fewer
2021-012 or fewer
2021-022 or fewer
2021-03no snapshot
2021-042 or fewer
2021-052 or fewer
2021-062 or fewer
2021-072 or fewer
2021-083 or fewer
2021-092 or fewer
2021-102 or fewer
2021-112 or fewer
2021-122 or fewer
2022-012 or fewer
2022-022 or fewer
2022-033 or fewer
2022-043 or fewer
2022-053 or fewer
2022-0660
2022-07170
2022-08170
2022-093 or fewer
2022-102 or fewer
2022-113 or fewer
2022-123 or fewer
2023-013 or fewer
2023-023 or fewer
2023-03no snapshot
2023-043 or fewer
2023-053 or fewer
2023-0670
2023-073 or fewer
2023-084 or fewer
2023-093 or fewer
2023-104 or fewer
2023-114 or fewer
2023-124 or fewer
2024-014 or fewer
2024-024 or fewer
2024-034 or fewer
2024-044 or fewer
2024-055 or fewer
2024-0650
2024-074 or fewer
2024-084 or fewer
2024-093 or fewer
2024-104 or fewer
2024-114 or fewer
2024-123 or fewer
2025-01620
2025-023 or fewer
2025-035 or fewer
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-09190
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-0290
2026-03150
2026-046 or fewer
2026-05120
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-106 or fewer

Products

The products that kept showing up in Wavlink's monthly top three, with their CVEs summed over those months.

  1. Wavlink AC3000621 month
  2. Wl-wn533a8 Firmware621 month
  3. Wl-nu516u1 Firmware223 months
  4. WN530H4 Firmware212 months
  5. WN531P3 Firmware161 month
  6. WN533A8 Firmware161 month
  7. Wl-nu516u1102 months
  8. NU516U191 month
  9. Wl-wn578w271 month
  10. Wl-wn578w2 Firmware71 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Wavlink.

  1. CVE-2026-113802Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler9.8
  2. CVE-2026-110958Wavlink WN530HG4B api.cgi heap-based overflow10.0
  3. CVE-2026-110957Wavlink WL-WN530BE2-A Login Processing api.cgi sub_12580 os command injection10.0
  4. CVE-2026-109110Wavlink WL-WN592AX6 wmapd system os command injection10.0
  5. CVE-2026-109109Wavlink WL-WN530BE1-A Settings Export CGI ExportAllSettings.cgi strcpy stack-based overflow10.0
  6. CVE-2026-109108Wavlink WL-WN530BE1-A uploadVpn.cgi popen os command injection9.9
  7. CVE-2026-109107Wavlink WL-WN592AX6 upload.cgi main null pointer dereference6.5
  8. CVE-2026-74843Wavlink WN531P3/WN535M1 Export Pingortrace CGI export_pingortrace.cgi strcpy stack-based overflow10.0
  9. CVE-2026-18607Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow8.8
  10. CVE-2026-18590Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection6.3
  11. CVE-2026-18589Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow9.8
  12. CVE-2026-18588Wavlink WL-NU516U1 nas.cgi fgets stack-based overflow9.8
  13. CVE-2026-18587Wavlink WL-NU516U1 Config Import os command injection7.5
  14. CVE-2026-15513Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection6.3
  15. CVE-2026-13539Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow8.8

The record

Peak rank
#18 in Jan 2025
Busiest month shown
Jan 2025, 62 CVEs
Months with a KEV entry
0 since Oct 2020
Monthly snapshots
11 since 2020
Wavlink's full record, month by month