Skip to content
OpenAdvisories

Vendor

WAVLINK

172 known vulnerabilities.

Products

Wavlink AC3000 62 NU516U1 18 WL-NU516U1 17 WL-WN578W2 10 WL-WN579A3 7 WN536AX6-A 7 WN553X1-B 6 WL-WN531AX2 5 WL-WN530BE1-A 4 WN530H4 4 WN530HG4 4 WN572HG3 4 WN535K2 3 WN535K3 3 WN531G3 3 WN535M1 3 WL-WN579X3-C 3 WL-WN570HA1 3 WN701AE 2 WL-NU516U1-A 2 WN535M3 2 WN551X3-A 2 WL-WN592AX6 2 WL-WN530HG4B 1 WN530HG4B 1 WN579X3-D 1 WN531P3 1 WN579X3 1 QUANTUM D2G 1 QUANTUM D3G 1 WL-WN530G3A 1 WL-WN530HG3 1 WL-WN532A3 1 WL-WN576K1 1 WL-WN530H4 1 WN572 1 WN570H 1 WN573 1 WN529 1 WN530 1
All Critical High Medium Low Exploited only Public exploit

172 results · Feed

  • Medium 5.5
    CVE-2025-10961

    Wavlink NU516U1 Delete_Mac_list wireless.cgi sub_4030C0 command injection

    A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete_Mac_list Page. Executing manipulation of the argument delete_list can lead to command injection. Th…

    WAVLINK NU516U1
  • Medium 6.3
    CVE-2025-10960

    Wavlink NU516U1 DeleteMac wireless.cgi sub_402D1C command injection

    A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument delete_list results in command injection. Th…

    WAVLINK NU516U1
  • Medium 6.3
    CVE-2025-10959

    Wavlink NU516U1 firewall.cgi sub_401778 command injection

    A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. The affected element is the function sub_401778 of the file /cgi-bin/firewall.cgi. Such manipulation of the argument dmz_flag leads to command injection. The attack can be executed remotely. The…

    WAVLINK NU516U1
  • Medium 6.3
    CVE-2025-10958

    Wavlink NU516U1 AddMac wireless.cgi sub_403010 command injection

    A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impacted is the function sub_403010 of the file /cgi-bin/wireless.cgi of the component AddMac Page. This manipulation of the argument macAddr causes command injection. Remote exploitation of the attack i…

    WAVLINK NU516U1
  • Medium 4.7
    CVE-2025-10775 EPSS 17%

    Wavlink WL-NU516U1 login.cgi sub_4012A0 os command injection

    A security vulnerability has been detected in Wavlink WL-NU516U1 240425. This vulnerability affects the function sub_4012A0 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to os command injection. It is possible to launch the at…

    WAVLINK WL-NU516U1
  • High 7.3
    CVE-2025-10359

    Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injection

    A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The exploit is no…

    WAVLINK WL-WN578W2
  • High 7.3
    CVE-2025-10358

    Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection

    A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated remotely. …

    WAVLINK WL-WN578W2
  • Medium 6.3
    CVE-2025-10325

    Wavlink WL-WN578W2 login.cgi sub_401BA4 command injection

    A vulnerability was identified in Wavlink WL-WN578W2 221110. This impacts the function sub_401340/sub_401BA4 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to command injection. It is possible to launch the attack remotely. The…

    WAVLINK WL-WN578W2
  • High 7.3
    CVE-2025-10324

    Wavlink WL-WN578W2 firewall.cgi sub_401C5C command injection

    A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects the function sub_401C5C of the file firewall.cgi. This manipulation of the argument pingFrmWANFilterEnabled/blockSynFloodEnabled/blockPortScanEnabled/remoteManagementEnabled causes comm…

    WAVLINK WL-WN578W2
  • High 7.3
    CVE-2025-10323

    Wavlink WL-WN578W2 wizard_rep.shtml sub_409184 command injection

    A vulnerability was found in Wavlink WL-WN578W2 221110. The impacted element is the function sub_409184 of the file /wizard_rep.shtml. The manipulation of the argument sel_EncrypTyp results in command injection. The attack may be performed from remote. The ex…

    WAVLINK WL-WN578W2
  • Medium 5.3
    CVE-2025-10322

    Wavlink WL-WN578W2 sysinit.html password recovery

    A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out rem…

    WAVLINK WL-WN578W2
  • Medium 5.3
    CVE-2025-10321

    Wavlink WL-WN578W2 live_online.shtml information disclosure

    A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is an unknown function of the file /live_online.shtml. Executing manipulation can lead to information disclosure. The attack can be executed remotely. The exploit has been published and may be used.…

    WAVLINK WL-WN578W2
  • Medium 6.3
    CVE-2025-9149

    Wavlink WL-NU516U1 wireless.cgi sub_4032E4 command injection

    A vulnerability was determined in Wavlink WL-NU516U1 M16U1_V240425. This impacts the function sub_4032E4 of the file /cgi-bin/wireless.cgi. This manipulation of the argument Guest_ssid causes command injection. The attack is possible to be carried out remotel…

    WAVLINK WL-NU516U1
  • Critical 9.8
    CVE-2025-5408

    WAVLINK WL-WN576K1 HTTP POST Request login.cgi sys_login buffer overflow

    A vulnerability was found in WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3 and WL-WN576K1 up to V1410_240222 and classified as critical. Affected by this issue is the function sys_login of the file /cgi-bin/login.cgi of the component …

    WAVLINK QUANTUM D3G WL-WN530HG3 WL-WN576K1
  • Critical 10.0
    CVE-2024-34166 EPSS 16%

    An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 …

    WAVLINK Wavlink AC3000
  • Critical 9.6
    CVE-2024-39363 EPSS 49%

    A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC30…

    WAVLINK Wavlink AC3000
  • Critical 10.0
    CVE-2024-39761

    Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33…

    WAVLINK Wavlink AC3000
  • Critical 10.0
    CVE-2024-39760 EPSS 18%

    Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33…

    WAVLINK Wavlink AC3000
  • Critical 10.0
    CVE-2024-39759

    Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39763

    Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC30…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39765

    Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC30…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39764

    Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC30…

    WAVLINK Wavlink AC3000
  • Critical 10.0
    CVE-2024-36290

    A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39288 EPSS 14%

    A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V503…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39762

    Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC30…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39769

    Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V503…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39768

    Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V503…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39770

    Multiple buffer overflow vulnerabilities exist in the internet.cgi set_qos() functionality of Wavlink AC3000 M33A8.V503…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39367

    An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC300…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39756

    A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.21050…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39294

    A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505.…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-37184

    A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.21050…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39358

    A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A …

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-21797 EPSS 21%

    A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505.…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-37357

    A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39774

    A buffer overflow vulnerability exists in the adm.cgi set_sys_adm() functionality of Wavlink AC3000 M33A8.V5030.210505.…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39370

    An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V503…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-37186 EPSS 23%

    An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.…

    WAVLINK Wavlink AC3000
  • Critical 9.1
    CVE-2024-39782

    Multiple OS command injection vulnerabilities exist in the adm.cgi sch_reboot() functionality of Wavlink AC3000 M33A8.V…

    WAVLINK Wavlink AC3000
  • Critical 10.0
    CVE-2024-39754

    A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially craft…

    WAVLINK Wavlink AC3000