WAVLINK Cascade: 21 Critical Router Flaws and Active Ivanti Exploitation

The Daily CVE Update · Nov 2, 2026 · 14m

WAVLINK Cascade: 21 Critical Router Flaws and Active Ivanti Exploitation

On 1 and 2 November 2026, NIST published 21 critical vulnerabilities affecting WAVLINK routers and access points commonly found in UK small business networks. All carry CVSS scores of 10.0, all are remotely exploitable, and public exploit code is already circulating. The affected models span multiple product lines, with command injection and buffer overflow flaws allowing complete device takeover. Separately, CISA confirmed active exploitation of Ivanti Connect Secure VPN appliances, adding two vulnerabilities to its…