Slew of Wav Link vulnerabilities
Summary: Cisco Talos discovered 44 vulnerabilities and 63 CVEs across ten .cgi files, three .sh files, and the static login page of the WavLink AC3000 wireless router's web application. An attacker can send specially crafted network packets over WAN to gain root access to the router via the wcrtrl service and static login credentials, and WavLink has declined to release a patch.
Bottom line: WavLink has declined to patch a router it sells as one of the most popular gigabit models in the US, leaving 63 CVEs and a WAN-reachable path to root access with no vendor fix.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026