Wavlink Wl Wn530H4 vulnerabilities

3 vulnerabilities

Known vulnerabilities in Wavlink Wl Wn530H4, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2025-44868wavlinkwl-wn530h4_firmware
EPSS score
2.66%
Wavlink WL-WN530H4 20220801 was found to contain a command injection vulnerability in the ping_test function of the adm.cgi via the pingIp parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.7.5CVE-2022-48165wavlinkwl-wn530h4_firmware
EPSS score
3.28%
An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN530H4 M30H4.V5030.210121 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.8.6CVE-2026-6483wavlinkwl-wn530h4_firmware
EPSS score
3.18%
A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version 2026.04.16 is able to resolve this issue. Upgrading the affected component is recommended.