References https://github.com/ibaiw/2023Hvv/blob/main/%E7%9D%BF%E5%9B%A0Wavlink%20WL_WNJ575A3%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C.md https://www.ddpoc.com/DVB-2022-3774.html https://blog.csdn.net/wuwenshequ/article/details/141311680 https://app.opencve.io/cve/?vendor=wavlink https://james-clee.com/tag/wavlink/ https://www.klogixsecurity.com/scorpion-labs-blog/anatomy-of-an-iot-exploit-from-hands-on-to-rce https://www.sentinelone.com/vulnerability-database/cve-2026-7690/ https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_9/9.md https://github.com/ice-wzl/Wavlink-WN530G3A-Cmd-Injection/blob/main/README.md https://cn-sec.com/archives/tag/%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C
Related VulnerabilitiesPoCCVE-2026-21484: AnythingLLM - Username Enumeration via Password RecoveryWavlink WL-WN578W2跨站脚本漏洞(CVE-2026-4544)PoCCVE-2022-28987: Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration杭州吉拉科技有限公司LVS精益价值管理系统userName参数存在SQL注入漏洞广州讯尔软件科技有限公司讯尔POS系统TxtUserName参数存在SQL注入漏洞PoCs3-username-disclosure: x-amz-meta-s3cmd-attrs Header Username DisclosurePoCCVE-2020-25200: Pritunl VPN Server 1.29.2145.25 - Username Enumerationwavlink-router-live-api-cgi-rce: WavLink Router Live API cgi RCE(CVE-2025-8554) Atjiu PyBBS 6.0.0 用户列表页面Username参数跨站脚本漏洞(CVE-2025-8467)Wazifa System 1.0 regcontrol.php Username参数SQL注入漏洞PoCCVE-2020-10973: WAVLINK - Access ControlPoCCVE-2020-12124: WAVLINK WN530H4 live_api.cgi - Command InjectionPoCCVE-2020-12127: WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure