Vulnerabilidades en WAVLINK
136 resultadosAnálisis Vexday
Wavlink acumula 11 vulnerabilidades catalogadas, sendo 1 de severidade crítica, mas nenhuma sob exploração ativa conhecida até o momento. A fraqueza dominante é CWE-77 (command injection), padrão típico em dispositivos de rede, e o risco não é recente — ausência de divulgações nos últimos 90 dias sugere que a base de vulnerabilidades é estabilizada e de menor dinâmica de descoberta.
CVE-2022-40622—WAVLINK Quantum D4G (WN531G3) Session Management by IP AddressEPSS 0.7%CVE-2026-5004HIGHWavlink WL-WN579X3-C UPNP firewall.cgi sub_4019FC stack-based overflowEPSS 0.7%CVE-2026-2567HIGHWavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflowEPSS 0.7%CVE-2026-3715HIGHWavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflowEPSS 0.7%CVE-2026-18588CRITICALWavlink WL-NU516U1 nas.cgi fgets stack-based overflowEPSS 0.6%CVE-2026-18589CRITICALWavlink WL-NU516U1 nas.cgi change_password stack-based overflowEPSS 0.6%CVE-2022-40623—WAVLINK Quantum D4G (WN531G3) CSRFEPSS 0.6%CVE-2025-10321MEDIUMWavlink WL-WN578W2 live_online.shtml information disclosureEPSS 0.5%CVE-2026-2566HIGHWavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflowEPSS 0.5%CVE-2026-13539HIGHWavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflowEPSS 0.5%CVE-2025-10322MEDIUMWavlink WL-WN578W2 sysinit.html password recoveryEPSS 0.4%CVE-2026-18607HIGHWavlink NU516 lighttpd upload.cgi strcpy stack-based overflowEPSS 0.4%CVE-2026-6559MEDIUMWavlink WL-WN579A3 login.cgi sub_401F80 cross site scriptingEPSS 0.3%CVE-2026-4544MEDIUMWavlink WL-WN578W2 POST Request login.cgi cross site scriptingEPSS 0.3%CVE-2026-3716MEDIUMWavlink WL-WN579X3-C adm.cgi sub_401AD4 cross site scriptingEPSS 0.2%CVE-2026-4166MEDIUMWavlink WL-NU516U1 login.cgi sub_404F68 cross site scriptingEPSS 0.2%