#Wavlink
All CosmicBytez Labs articles tagged #Wavlink, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-120195: WAVLINK WL-WN579A3-A Setup Wizard Command Injection
A critical OS command injection in the Initial Setup Wizard of the WAVLINK WL-WN579A3-A lets attackers run commands through the wlan_ssid argument. CVSS 10.0.
- Security
CVE-2026-120196: WAVLINK WN579X3-D port_forward Command Injection
A critical OS command injection in the port_forward function of the WAVLINK WN579X3-D is remotely exploitable and a public exploit exists. CVSS 9.9.
- Security
CVE-2026-110957: Critical OS Command Injection in Wavlink WL-WN530BE2-A Routers
A maximum-severity CVSS 10.0 flaw lets unauthenticated attackers run OS commands on Wavlink WL-WN530BE2-A routers via the REMOTE_ADDR parameter.
- Security
CVE-2026-109110: Wavlink WL-WN592AX6 Unauthenticated OS Command Injection
A critical, unauthenticated command injection in Wavlink WL-WN592AX6 routers lets remote attackers run arbitrary OS commands as root.
- Security
CVE-2026-89009: WAVLINK Router Unauthenticated Arbitrary File Write
WAVLINK WN535M1/WN535M3 routers let unauthenticated attackers overwrite any file on the device via the root sync_server daemon.
- Security
CVE-2026-89010: WAVLINK Router Unauthenticated Root Command Injection
A critical OS command injection in WAVLINK WN535M1/WN535M3 routers lets unauthenticated attackers run root commands via sync_server.