Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
63 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Crítica (9.1) | 19% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An external config control vulnerability exists in the openvpn.cgi openvpn_client_setup() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 9.7% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 23% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An os command injection vulnerability exists in the adm.cgi set_ledonoff() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 1.3% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the adm.cgi rep_as_bridge() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 2.0% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the wireless.cgi set_wifi_basic() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 21% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A command execution vulnerability exists in the qos.cgi qos_sta() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Crítica (9.8) | 1.4% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the login.cgi Goto_chidx() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an unauthenticated HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 1.3% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A buffer overflow vulnerability exists in the usbip.cgi set_info() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Crítica (9.8) | 12% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A stack-based buffer overflow vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 8.5% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Analizada | Crítica (9.8) | 16% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | An os command injection vulnerability exists in the touchlist_sync.cgi touchlistsync() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted set of HTTP requests can lead to arbitrary code execution. An attacker can send an HTTP request to trigger this vulnerability. | |
| Analizada | Alta (7.2) | 21% | — | Wavlink Wl-wn533a8 Firmware | 14/1/2025 | 17/6/2026 | A command execution vulnerability exists in the adm.cgi set_TR069() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability. | |
| Modificada | Alta (7.5) | 3.1% | 💥 Exploit | Wavlink Wl-wn533a8 Firmware | 6/2/2023 | 17/6/2026 | An access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials. |