Wavlink M86X3A_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. The vulnerability arises because the Cookie parameter does not properly validate the length of input data. Attackers can exploit this to execute arbitrary code or cause a denial of service (DoS) on the system
CVE-2025-55847
CVSS base score
8.8 (v3.1)
Severity
HIGH
Attack vector
Adjacent_network
Weakness
CWE-120
Last modified
November 5, 2026
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
wavlink wl-wn586x3a firmware
References
- github.com Exploit, Third Party Advisory