CVE-2021-44259: Wavlink Wl-WN531G3 Firmware

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

A vulnerability is in the 'wx.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When an unauthorized user accesses this page directly, it connects to this device as a friend of the device owner.

Affected products

• Wavlink Wl-WN531G3 Firmware: version a42w-1.27.6-20180418 only

Published 2022-03-17. Last modified 2026-06-17.