VulnSea

Wavlink has 18 CVEs on record between 2025 and 2026. Disclosure cadence is accelerating: 6 in the last 90 days against 4 in the 90 before. The busiest recent month was October 2026 with 6. The median CVSS is 6.3 (medium), with 5 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-77 (14) and CWE-74 (7). Most affected products: wl-nu516u1_firmware (11), WL-WN530BE1-A (2), WL-WN592AX6 (2).

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
6.3
Publish → KEV
—
Last 90 days
6 prev 4

Products

  • wl-nu516u1_firmware 11
  • WL-WN530BE1-A 2
  • WL-WN592AX6 2
  • WL-WN530BE2-A 1
  • WN530HG4B 1
  • wl-wn578w2_firmware 1
Follow Wavlink:RSS feedSave a search →Embed badge ↗
18
Total CVEs
5
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

Wavlink vulnerabilities

CVEs affecting Wavlink, newest first. Open any entry for full detail, references, and exploit status.

18 CVEsRSS

CVE-2026-110958Critical· 10.0PoC
today

A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724

A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The ex…

▾ AbyssalWavlink · WN530HG4Bvia NVD
CVE-2026-110957Critical· 10.0
today

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604

A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604. The affected element is the function sub_12580 of the file api.cgi of the component Login Processing. The manipulation of the argument REMOTE_ADDR leads to os …

▾ MidnightWavlink · WL-WN530BE2-Avia NVD
CVE-2026-109110Critical· 10.0PoC
2d ago

A flaw has been found in Wavlink WL-WN592AX6 250422

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The explo…

▾ AbyssalWavlink · WL-WN592AX6EPSS 2.0%via NVD
CVE-2026-109109Critical· 10.0
2d ago

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117

A vulnerability was detected in Wavlink WL-WN530BE1-A 251117. This vulnerability affects the function strcpy of the file /cgi-bin/ExportAllSettings.cgi of the component Settings Export CGI. Performing a manipulation of the argument HTTP_…

▾ MidnightWavlink · WL-WN530BE1-AEPSS 0.58%via NVD
CVE-2026-109108Critical· 9.9
2d ago

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117

A security vulnerability has been detected in Wavlink WL-WN530BE1-A 251117. This affects the function popen of the file /cgi-bin/uploadVpn.cgi. Such manipulation of the argument Type leads to os command injection. The attack may be perfo…

▾ MidnightWavlink · WL-WN530BE1-AEPSS 2.3%via NVD
CVE-2026-109107Medium· 6.5PoC
2d ago

A weakness has been identified in Wavlink WL-WN592AX6 250422

A weakness has been identified in Wavlink WL-WN592AX6 250422. Affected by this issue is the function main of the file /cgi-bin/upload.cgi. This manipulation of the argument Cookie causes null pointer dereference. The attack is possible t…

▾ TwilightWavlink · WL-WN592AX6EPSS 0.53%via NVD
CVE-2026-8230Medium· 6.3
5mo ago

A flaw has been found in Wavlink NU516U1 240425

A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 8.5%via NVD
CVE-2026-8229Medium· 6.3
5mo ago

A vulnerability was detected in Wavlink NU516U1 240425

A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Re…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 8.5%via NVD
CVE-2026-8228Medium· 6.3
5mo ago

A security vulnerability has been detected in Wavlink NU516U1 240425

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command inject…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 8.5%via NVD
CVE-2026-8227Medium· 6.3
5mo ago

A weakness has been identified in Wavlink NU516U1 240425

A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been m…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 8.5%via NVD
CVE-2025-10964Medium· 6.3
1y ago

A weakness has been identified in Wavlink NU516U1

A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub_401B30 of the file /cgi-bin/firewall.cgi. This manipulation of the argument remoteManagementEnabled causes command injection. The attac…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 6.8%via NVD
CVE-2025-10963Medium· 6.3
1y ago

A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425

A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument del_flag results in command injection. It is possible to launch…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 6.8%via NVD
CVE-2025-10962Medium· 6.3
1y ago

A vulnerability was identified in Wavlink NU516U1 M16U1_V240425

A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This impacts the function sub_403198 of the file /cgi-bin/wireless.cgi of the component SetName Page. The manipulation of the argument mac_5g leads to command injection. It…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 6.8%via NVD
CVE-2025-10961Medium· 5.5
1y ago

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete_Mac_list Page. Executing manipulation of the argument delete_list can lead to…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 8.1%via NVD
CVE-2025-10960Medium· 6.3
1y ago

A vulnerability was found in Wavlink NU516U1 M16U1_V240425

A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The impacted element is the function sub_402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument delete_list results in…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 6.8%via NVD
CVE-2025-10959Medium· 6.3
1y ago

A vulnerability has been found in Wavlink NU516U1 M16U1_V240425

A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. The affected element is the function sub_401778 of the file /cgi-bin/firewall.cgi. Such manipulation of the argument dmz_flag leads to command injection. The attack can be …

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 6.6%via NVD
CVE-2025-10958Medium· 6.3
1y ago

A flaw has been found in Wavlink NU516U1 M16U1_V240425

A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impacted is the function sub_403010 of the file /cgi-bin/wireless.cgi of the component AddMac Page. This manipulation of the argument macAddr causes command injection. Remote exploi…

▾ Sunlitwavlink · wl-nu516u1_firmwareEPSS 6.8%via NVD
CVE-2025-10321Medium· 5.3
1y ago

A flaw has been found in Wavlink WL-WN578W2 221110

A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is an unknown function of the file /live_online.shtml. Executing manipulation can lead to information disclosure. The attack can be executed remotely. The exploit has been publ…

▾ Sunlitwavlink · wl-wn578w2_firmwareEPSS 0.53%via NVD
Wavlink vulnerabilities (CVEs) · VulnSea