VulnSocial

CVE-2026-89009Patch

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file write vulnerability that allows remote attackers to overwrite any file on the device by sending a crafted payload to the sync_server daemon on TCP port 13136. The daemon, which runs as root and requires no authentication, accepts a 100-byte filename field in its protocol header without path canonicalization, allowing attackers to supply an absolute path and write arbitrary content to overwrite startup scripts or credential stores to achieve persistent system compromise.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-36

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-09-11: 1Patch / Workaround · 2026-09-11: 1Technical Details · 2026-09-11: 109-11
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatAft@ThreatAft
    Patch

    🚨 WAVLINK ROUTER — PRE-AUTH ROOT RCE CVE-2026-89010: CVSS 9.8 — OS Command Injection CVE-2026-89009: CVSS 9.1 — Arbitrary File Write UPDATE NOW. Block port 13136. → https://threataft.com/articles/wavlink-wn535m1-wn535m3-cve-2026-89010-cve-2026-89009-preauth-rce #WAVLINK #CVE #RCE #SOHO #CVSS9 #PatchNow #CyberSecurity #ThreatIntel

    Post summary

    The tweet announces two high‑severity CVEs affecting WAVLINK routers and urges users to block port 13136 as an immediate mitigation step.

    0000174
    43 followersView on X

Explore more

Back to dashboard