w
wavlink
Security Risk Profile
75
/100
highSecurity Risk Score
Comprehensive risk assessment based on 251 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 27, 2020 to present
251
Total CVEs
197
Critical+High
0
Exploited
193
Unpatched
Threat Assessment
Avg CVSS
7.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
193
Critical/High
Risk Level
75/100
high
🆕 17Fresh (<7d)📈 28 in Last 30 Days
Severity Distribution
Critical
129High
68Medium
31Low
23Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
42Age Distribution
Common Weaknesses (CWE)
1
Command Injection
122
2
OS Command Injection
64
3
Buffer Overflow
45
4
XSS
7
5
Code Injection
5
Most Affected Products
1. Wavlink Wl-wn533a8 Firmware64
2. Wavlink AC3000 M33A858
3. Wavlink Wn530h4 Firmware28
4. Wavlink Wn535g3 Firmware24
5. Wavlink Wn533a8 Firmware21
Recent Vulnerabilities
See more →CVE-2026-120344
CVSS 9.3critical
Nov 2, 2026🔧 No Patch
CVE-2026-120345
CVSS 9.3critical
WAVLINK WN551X3-A DNS Resolution ioos sub_41a430 os command injection
Nov 2, 2026🔧 No Patch
CVE-2026-120282
CVSS 8.6high
Nov 2, 2026🔧 No Patch
CVE-2026-120279
CVSS 9.3critical
Nov 2, 2026🔧 No Patch
CVE-2026-120281
CVSS 9.3critical
WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow
Nov 2, 2026🔧 No Patch
CVE-2026-120278
CVSS 5.5medium
Nov 2, 2026🔧 No Patch
CVE-2026-120280
CVSS 9.3critical
WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection
Nov 2, 2026🔧 No Patch
CVE-2026-120277
CVSS 9.3critical
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
Nov 1, 2026🔧 No Patch
CVE-2026-120276
CVSS 9.3critical
WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
Nov 1, 2026🔧 No Patch
CVE-2026-120240
CVSS 8.6high
Nov 1, 2026🔧 No Patch
Monitor wavlink in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.