1
CVEs
1
Critical
0
High
0
KEV
1
PoC
1
Unpatched C/H
0.0%
Patch Rate
1.0%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
0
MEDIUM
0
LOW
0
Monthly CVE Trend
Affected Products (30)
Wl Wn533A8 Firmware
62
Wn530H4 Firmware
27
Wn535G3 Firmware
23
Wn533A8 Firmware
20
Wl Nu516u1 Firmware
18
Wn531P3 Firmware
17
Wn572Hp3 Firmware
16
Nu516U1
9
Wl Wn579a3 Firmware
8
Wl Wn575A3 Firmware
7
Wl Wn530Hg4 Firmware
7
Wl Nu516U1
7
Wn551K1 Firmware
7
Wl Wn578W2 Firmware
7
Wn530Hg4 Firmware
6
Wn572Hg3 Firmware
6
Wn531G3 Firmware
6
Wl Wn535K3 Firmware
5
Wl Wn531Ax2 Firmware
5
Wifi Repeater Firmware
5
Wn579X3 Firmware
4
Wl Wn535K2 Firmware
3
Aerial X 1200M Firmware
3
Wl Wn578w2
3
Wl Wn579G3 Firmware
3
Wl Wn579x3 C Firmware
2
Wl Wn570Ha1
2
Wl Nu516U1 A
2
Wn57X93 Firmware
2
Jetstream Erac3000 Firmware
2
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2026-74843 | Remote code execution in Wavlink WN531P3 and WN535M1 (firmware V250922) consumer routers arises from an unsafe strcpy in the export_pingortrace.cgi binary, where the attacker-controlled HTTP_COOKIE header is copied into a fixed stack buffer without bounds checking. Unauthenticated remote attackers can send a crafted Cookie header to the device web interface to overflow the stack and hijack execution. Publicly available exploit code exists (disclosed via VulDB with a PoC report), but there is no public exploit identified as actively exploited in the wild, and no CISA KEV listing. | CRITICAL | 9.3 | 1.0% | 67 |
PoC
No patch
|