cvedb.io
CVE-2025-61128
CRITICAL · CVSS 9.1
EPSS exploitation probability: 0%
Published 2025-10-28T15:16:13.350 · Last modified 2026-06-17T09:50:20.690

Summary

Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3_V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi.

Does this affect you?

Add your gear to cvedb and we'll alert you only when a vendor you run ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.