Vendor · Vulnerability hub

WAVLINK vulnerabilities

Security advisories and vulnerability coverage for WAVLINK routers and other network devices.

We track 3 WAVLINK CVEs; none is on CISA's KEV catalog yet.

1 article 3 CVEs RSS JSON

CVEs tracked: 3
On CISA KEV: 0
Ransomware use: 0
Rated critical: 3

Latest WAVLINK coverage

Our reporting filed under WAVLINK, plus any story that cites one of its CVEs.

~/articles/2026-11-01-wavlink-wn553x1-b-three-command-injection-cves

wavlink

Three Command Injection CVEs Affect WAVLINK WN553X1-B

Three published CVE records identify command injection flaws in WAVLINK WN553X1-B firmware. All carry a CNA CVSS 3.1 score of 9.9.

Nov 1read →

Other WAVLINK CVEs we track

CVE / Vulnerability	Severity	CVSS	EPSS	Added to KEV
CVE-2026-120240 WAVLINK WN553X1-B WireGuard Group Command Injectionwrite-up	[ CRITICAL ]	9.9	—	—
CVE-2026-120239 WAVLINK WN553X1-B WireGuard Handler Command Injectionwrite-up	[ CRITICAL ]	9.9	—	—
CVE-2026-120238 WAVLINK WN553X1-B OpenVPN Handler Command Injectionwrite-up	[ CRITICAL ]	9.9	—	—

Not on CISA KEV as of our last sync. Severity and CVSS as stated by NVD or the vendor; EPSS from FIRST.org.

Machine-readable: /api/v1/vendors/wavlink.json.

Every CVE row links to its record with the CISA required action, catalog coverage and primary sources. We describe impact and remediation only; no exploit code. See the full KEV tracker, the vendor scorecard, or all vendors.