Wi-Fi vulnerabilities and fixes

CVEs that mention Wi-Fi, ranked by priority. 22 tracked.

Wi-Fi has 22 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-10-23. Highest priority: CVE-2026-19348 (score 68/100).

• CVE-2026-19348 CRITICAL 9.8 A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a
• CVE-2026-15314 HIGH 7.5 UPGRADE Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation vulnerability in the handling of authen
• CVE-2026-12989 HIGH 8.7 A lack of authentication in the mobile app (APK v5.5.0) for Ghost Robotics' Vision 60 robot allows an unauthen
• CVE-2026-98889 HIGH 7.8 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix sched scan IE siz
• CVE-2026-79876 CRITICAL 9.3 A sensitive information disclosure vulnerability in the Wi-Fi frame processing of AOS-10 could allow an unauth
• CVE-2026-18536 HIGH 7.5 UPGRADE Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP. The Data::Entropy::
• CVE-2026-71273 MEDIUM 6.5 OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accepts configuration changes via a plain GET
• CVE-2026-67596 MEDIUM 6.2 CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unau
• CVE-2026-20494 MEDIUM 5.5 MITIGATE MITIGATE In wifi, there is a possible out of bounds read due to a missing bounds check
• CVE-2026-30613 MEDIUM 4.6 An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled So
• CVE-2026-20493 MEDIUM 4.4 MITIGATE MITIGATE In wifi, there is a possible out of bounds write due to a missing bounds check
• CVE-2026-98887 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: reject undersized H
• CVE-2026-98890 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: reject short monitor TX f
• CVE-2026-98891 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: validate deauth frame len
• CVE-2026-98916 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: check link is beaconing fo
• CVE-2026-98936 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: reset ar->num_stations on h
• CVE-2026-98957 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: disable rx napi when
• CVE-2026-98958 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: account non-AQL frames per pe
• CVE-2026-99060 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7603: initialize global sta
• CVE-2026-99061 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix P2P device removal ra
• CVE-2026-98874 HIGH n/a In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't WARN on WoWLAN
• CVE-2026-78801 HIGH n/a An issue in SKYWORTH DIGITAL CO., LTD SK-WR6640X Wi-Fi 6 Dual-Band Fiber Router (AX1800M) V1.0.3 allows a remo

FAQ

How do I fix Wi-Fi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is Wi-Fi being exploited right now?

None of the tracked Wi-Fi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which Wi-Fi CVE should I patch first?

CVE-2026-19348 currently ranks highest (68/100): A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a.

← Back to latest CVEs