CVE-2026-89009 | WAVLINK WN535M1/WN535M3 up to M35M1_V250922 sync_server daemon filename path traversal

September 11, 2026 Yanac

A vulnerability was found in WAVLINK WN535M1 and WN535M3 up to M35M1_V250922. It has been rated as critical. Impacted is an unknown function of the component sync_server daemon. This manipulation of the argument filename causes path traversal. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is handled as CVE-2026-89009. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More