Wf 500 Firmware
Vendor:
First CVE: May 29, 2026 · Active for under a year
17
Total CVEs
More Total CVEs than 94% of tracked products
17.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
8.7
Avg CVSS
Higher Avg CVSS than 79% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Wf 500 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 29, 2026
59 days ago
Most Recent CVE
May 29, 2026
60 days ago
CVE Severity & Scoring
Wf 500 Firmware17 CVEs
47%
53%
All CVEs353,173 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local3 (17.6%)
Network14 (82.4%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low17 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None17 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low3 (17.6%)
High4 (23.5%)
None10 (58.8%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (17 CVEs).
17 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-41272CRITICAL Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and | May 29, 2026 | 9.8 | 39 | NO | NO |
CVE-2025-41277CRITICAL Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and | May 29, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-41276CRITICAL Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and | May 29, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-41275CRITICAL Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and | May 29, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-41274CRITICAL Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and | May 29, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-41273CRITICAL Nozomi Networks Labs identified a CWE-288: Authentication Bypass Using an Alternate Path or Channel in the Console WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R250 | May 29, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-41270CRITICAL Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and | May 29, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-41269CRITICAL Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in the Console WebUI in Waterfall WF-500 TX and | May 29, 2026 | 9.8 | 38 | NO | NO |
CVE-2025-41268CRITICAL Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Administration WebUI in Waterfall WF-500 TX and RX Hosts in version 7.9.1.0 R2502171040 that allows remote | May 29, 2026 | 9.1 | 36 | NO | NO |
CVE-2025-41281HIGH Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in Waterfall WF-500 RX Host in version 7.9.1.0 | May 29, 2026 | 7.8 | 31 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (17 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (17 CVEs).
Media Mentions
Signals from CVEs in this product scope (17 CVEs).
Top CNAs Publishing CVEs For Wf 500 Firmware
Top CWEs
Versions
No cataloged versions.