How many CVEs does WAVLINK have?

WAVLINK has 214 published CVE records since 2020, including 130 in the last two years.

How many WAVLINK CVEs are in CISA KEV?

None of WAVLINK's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which WAVLINK products have the most CVEs?

The WAVLINK products with the most published CVEs are wl-wn533a8 firmware, wl-wn533a8, Wavlink AC3000, WL-NU516U1, wl-nu516u1 firmware.

What are the most common weakness types in WAVLINK CVEs?

WAVLINK's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).

Are there public exploits for WAVLINK vulnerabilities?

Yes — 97 of WAVLINK's CVEs have a known public exploit.

How many critical WAVLINK vulnerabilities are there?

WAVLINK has 105 critical and 47 high-severity CVEs.

What is the average severity of WAVLINK CVEs?

The average CVSS base score across WAVLINK's scored CVEs is 8.0.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

214 CVEs

WAVLINK Vulnerabilities

Name: WAVLINK vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for WAVLINK.

214

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

97

Public exploits

PoC or exploit code

8.0

Avg CVSS

2020–2026

Overview

WAVLINK has 214 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 97 have a known public exploit. The average CVSS base score across scored CVEs is 8.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting WAVLINK products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on WAVLINK's vulnerability posture, as a share of its 214 published CVEs.

Average CVSS: 8.0
Critical / high: 71%
Actively exploited (KEV): 0%
Public exploit available: 45%
Patch available: 10%

Severity and exploitation

How the CVSS severity of WAVLINK's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical105

High47

Medium62

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of WAVLINK's CVEs are currently listed in CISA's KEV catalog.

Public exploits

97

97 of WAVLINK's CVEs have a known public exploit available.

Most affected products

The WAVLINK products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in WAVLINK CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish WAVLINK CVE records.

Disclosure activity by year

How many WAVLINK CVEs were published each year.

2020

12

2021

1

2022

48

2023

11

2024

12

2025

89

2026

41

Latest WAVLINK CVEs

The most recently disclosed vulnerabilities affecting WAVLINK.

Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection
CWE-78
Medium · CVSS 5.3
EPSS 1.4%2026-07-12
Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow
CWE-121
High · CVSS 8.7
EPSS 0.5%2026-06-29
Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection
CWE-77
Medium · CVSS 5.3
EPSS 1.3%2026-06-29
Wavlink NU516U1 login.cgi sys_login1 os command injection
CWE-77
Medium · CVSS 5.3
EPSS 4.9%2026-05-10
Wavlink NU516U1 wireless.cgi WifiBasic os command injection
CWE-77
Medium · CVSS 5.3
EPSS 4.9%2026-05-10
Wavlink NU516U1 wireless.cgi advance os command injection
CWE-78
Medium · CVSS 5.3
EPSS 4.8%2026-05-10
Wavlink NU516U1 adm.cgi wzdapMesh os command injection
CWE-78
Medium · CVSS 5.3
EPSS 4.9%2026-05-10
Wavlink NU516U1 adm.cgi wzdap os command injection
CWE-77
Medium · CVSS 5.3
EPSS 4.8%2026-05-09
Wavlink NU516U1 adm.cgi wifi_region os command injection
CWE-78
Medium · CVSS 5.3
EPSS 5.3%2026-05-09
Wavlink NU516U1 adm.cgi wan os command injection
CWE-77
Medium · CVSS 5.3
EPSS 5.3%2026-05-09
Wavlink NU516U1 adm.cgi wzdrepeater os command injection
CWE-77
Medium · CVSS 5.3
EPSS 4.8%2026-05-09
Wavlink NU516U1 adm.cgi change_wifi_password os command injection
CWE-77
Medium · CVSS 5.3
EPSS 5.5%2026-05-09

Track new WAVLINK CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor WAVLINK CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

Trendnet221 CVEs RealNetworks219 CVEs Acronis218 CVEs KDE215 CVEs Mitsubishi Electric215 CVEs amazon211 CVEs HashiCorp209 CVEs angeljudesuarez206 CVEs

Browse all vendors

Frequently asked questions

Common questions about WAVLINK vulnerabilities.

How many CVEs does WAVLINK have?: WAVLINK has 214 published CVE records since 2020, including 130 in the last two years.
How many WAVLINK CVEs are in CISA KEV?: None of WAVLINK's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which WAVLINK products have the most CVEs?: The WAVLINK products with the most published CVEs are wl-wn533a8 firmware, wl-wn533a8, Wavlink AC3000, WL-NU516U1, wl-nu516u1 firmware.
What are the most common weakness types in WAVLINK CVEs?: WAVLINK's CVEs most often map to these CWE weakness types: CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')), CWE-120 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-74 (Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')).
Are there public exploits for WAVLINK vulnerabilities?: Yes — 97 of WAVLINK's CVEs have a known public exploit.
How many critical WAVLINK vulnerabilities are there?: WAVLINK has 105 critical and 47 high-severity CVEs.
What is the average severity of WAVLINK CVEs?: The average CVSS base score across WAVLINK's scored CVEs is 8.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track WAVLINK vulnerabilities

Monitor new WAVLINK vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing