wf-500 firmware vulnerabilities and fixes

Recent CVEs affecting wf-500 firmware, with upgrade or downgrade steps. 17 tracked.

Also searched as: wf 500 firmware, wf-500firmware.

wf-500 firmware has 17 tracked vulnerabilities, 9 critical. A fixed release or vendor patch exists for 17. Most recent: 2026-05-29. Highest priority: CVE-2025-41269 (score 60/100).

• CVE-2025-41269 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41270 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41272 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41274 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41275 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41276 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41277 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41273 CRITICAL 9.8 UPGRADE Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Con
• CVE-2025-41268 CRITICAL 9.1 UPGRADE Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-
• CVE-2025-41271 HIGH 7.5 UPGRADE Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX
• CVE-2025-41265 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41266 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41267 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41279 HIGH 7.2 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41281 HIGH 7.8 UPGRADE Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('
• CVE-2025-41278 HIGH 7.8 UPGRADE Nozomi Networks Labs identified a CWE-125: Out-of-bounds Read in Waterfall WF-500 RX Host in version 7.10.0.0
• CVE-2025-41280 HIGH 7.8 UPGRADE Nozomi Networks Labs identified a CWE-23: Relative Path Traversal (Zip Slip) in Waterfall WF-500 RX Host in ve

FAQ

How do I fix wf-500 firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wf-500 firmware being exploited right now?

None of the tracked wf-500 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wf-500 firmware CVE should I patch first?

CVE-2025-41269 currently ranks highest (60/100): Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('.

RSS feed for wf-500 firmware · ← Back to latest CVEs