Wavlink
D
RISKY
165
Total CVEs
73
Crit / High
34
Medium
79%
Unpatched
0%
Patched
7.9
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB
How we collect data →
CVE Trend by Year
Patch Coverage
✓ 0 patched ✗ 100 unpatched ⏳ 26 pending score
Intelligence by Audience
PoC Available
8 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"wavlink" port:443
org:"Wavlink" http.status:200
Top EPSS (Exploitation Probability)
Quick Facts for Reporting
Total CVEs tracked
165
Critical severity
63
Actively exploited (CISA)
0
Unpatched ratio
79%
Avg CVSS score
7.9
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
MED
Vuln Volume
POOR
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
Security News Google News
Recent CVEs
showing 20 of 126
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-109109 PoC | 10.0 CRITICAL | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109110 PoC | 10.0 CRITICAL | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109108 PoC | 9.9 CRITICAL | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-109107 PoC | 6.5 MEDIUM | UNKNOWN / UNPATCHED | — | 2026-10-13 |
| CVE-2026-89009 PoC | 9.1 CRITICAL | UNKNOWN / UNPATCHED | — | 2026-09-11 |
| CVE-2026-74843 | 10.0 CRITICAL | UNKNOWN / UNPATCHED | — | 2026-08-17 |
| CVE-2026-18587 PoC | 7.5 HIGH | UNKNOWN / UNPATCHED | 1.26% | 2026-08-03 |
| CVE-2025-61128 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.17% | 2025-10-28 |
| CVE-2025-55847 PoC | ? N/A | UNKNOWN / UNPATCHED | 0.07% | 2025-09-26 |
| CVE-2025-10964 | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 6.81% | 2025-09-25 |
| CVE-2025-10963 | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 6.81% | 2025-09-25 |
| CVE-2025-10962 | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 6.81% | 2025-09-25 |
| CVE-2025-10961 | 5.1 MEDIUM | UNKNOWN / UNPATCHED | 8.13% | 2025-09-25 |
| CVE-2025-10960 | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 6.81% | 2025-09-25 |
| CVE-2025-10959 | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 6.56% | 2025-09-25 |
| CVE-2025-10958 | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 6.81% | 2025-09-25 |
| CVE-2025-10775 | 5.1 MEDIUM | UNKNOWN / UNPATCHED | 20.02% | 2025-09-22 |
| CVE-2025-10359 | 6.9 MEDIUM | UNKNOWN / UNPATCHED | 6.07% | 2025-09-13 |
| CVE-2025-10358 | 6.9 MEDIUM | UNKNOWN / UNPATCHED | 6.07% | 2025-09-13 |
| CVE-2025-10325 | 5.3 MEDIUM | UNKNOWN / UNPATCHED | 6.79% | 2025-09-12 |
Intel
Trust ScoreD — RISKY
Max CVSS10.0
Last Updated2026-08-03
Top Weaknesses
CWE-78
Unknown Weakness Type
33 occurrences in Wavlink CVEs
(20% of total)
CWE-121
Unknown Weakness Type
28 occurrences in Wavlink CVEs
(17% of total)
CWE-77
Unknown Weakness Type
27 occurrences in Wavlink CVEs
(16% of total)
CWE-74
Unknown Weakness Type
23 occurrences in Wavlink CVEs
(14% of total)
CWE-15
Unknown Weakness Type
12 occurrences in Wavlink CVEs
(7% of total)
CWE-79
Cross-Site Scripting (XSS)
6 occurrences in Wavlink CVEs
(4% of total)
CWE-121 (Stack-based Buffer Overflow)
Unknown Weakness Type
4 occurrences in Wavlink CVEs
(2% of total)
CWE-200
Sensitive Information Exposure
4 occurrences in Wavlink CVEs
(2% of total)
Company Profile
Wavlink is a Chinese manufacturer of networking equipment, including routers, range extenders, and other consumer-grade IoT devices. The company's products have been associated with numerous security vulnerabilities, making them a frequent target for exploitation in botnets and other cyberattacks.
Response Metrics
Est. MTTR ⓘ
~500 days
(Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -49% better
CVE count 2026 vs 2025:
90 → 46 CVEs
Patch Speed ⓘ Poor (>65% open)
79% of CVEs still unpatched.
Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
Financial Risk Estimate
Est. GDPR Low
€1.2M
Est. GDPR High
€12.3M
Based on 63 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.
Actions
Embed Badge
Wavlink D valtersit.com