CVE-2025-55847: Wavlink Wl-WN586X3A Firmware

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

Wavlink M86X3A_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. The vulnerability arises because the Cookie parameter does not properly validate the length of input data. Attackers can exploit this to execute arbitrary code or cause a denial of service (DoS) on the system

Affected products

• Wavlink Wl-WN586X3A Firmware: version m86x3a_v240730 only

Published 2025-09-26. Last modified 2026-06-17.