Five CVSS 10 flaws expose WAVLINK routers through DNS, OpenVPN, and WireGuard
On November 2, 2026, five vulnerabilities scored CVSS 10.0 were published for the WAVLINK WN551X3-A and WN536AX6-A routers, with exploits already public and no patch announced. Owners of these boxes should isolate them from the network and watch the VPN and DNS paths.