CVE-2022-23900: Wavlink Wl-WN531P3 Firmware

Critical severity, CVSS 9.8. EPSS: 3.5% chance of exploitation in the next 30 days.

A command injection vulnerability in the API of the Wavlink WL-WN531P3 router, version M31G3.V5030.201204, allows an attacker to achieve unauthorized remote code execution via a malicious POST request through /cgi-bin/adm.cgi.

Affected products

• Wavlink Wl-WN531P3 Firmware: version m31g3.v5030.201204 only

Published 2022-04-07. Last modified 2026-06-17.