Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2989▼ 73 respecto a la semana anterior
Críticas / altas1415▲ 65 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior
88 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 5.2% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection… | |
| Modificada | Alta (7.2) | 4.2% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection… | |
| Modificada | Alta (7.2) | 4.8% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection… | |
| Modificada | Alta (7.2) | 5.9% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | Multiple OS command injection vulnerabilities exist in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.A command injection… | |
| Modificada | Crítica (9.8) | 8.2% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection… | |
| Modificada | Crítica (9.8) | 17% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection… | |
| Modificada | Crítica (9.8) | 8.2% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | Multiple OS command injection vulnerabilities exist in the login.cgi set_sys_init() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an unauthenticated HTTP request to trigger these vulnerabilities.A command injection… | |
| Analizada | Alta (7.2) | 2.4% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 1.9% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the adm.cgi rep_as_router() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Crítica (9.8) | 1.3% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A static login vulnerability exists in the wctrls functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of network packets can lead to root access. An attacker can send packets to trigger this vulnerability. | |
| Analizada | Crítica (9.8) | 1.4% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A firmware update vulnerability exists in the login.cgi functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary firmware update. An attacker can send an unauthenticated message to trigger this vulnerability. | |
| Analizada | Alta (8.1) | 1.9% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A command execution vulnerability exists in the update_filter_url.sh functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 2.4% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic_mesh() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Crítica (9.1) | 2.3% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An external config control vulnerability exists in the nas.cgi set_nas() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 2.2% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An arbitrary code execution vulnerability exists in the adm.cgi set_MeshAp() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 8.2% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An os command injection vulnerability exists in the firewall.cgi iptablesWebsFilterRun() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Media (6.1) | 48% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to a disclosure of sensitive information. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 12% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 2.4% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 1.9% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 2.4% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 1.5% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the qos.cgi qos_sta_settings() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 1.5% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the adm.cgi set_wzdgw4G() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 13% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the internet.cgi set_add_routing() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Crítica (9.1) | 34% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An external config control vulnerability exists in the nas.cgi set_smb_cfg() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. |