AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-09-11T15:17:08.357Z and has not been modified since then. WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary commands as root by sending crafted filenames to the sync [truncated]
CVE-2026-89009 is a high-severity vulnerability affecting WAVLINK WN535M1 and WN535M3 routers with firmware prior to M35M1_V250922. The vulnerability allows unauthenticated attackers to write arbitrary files on the device, potentially leading to persistent system compromise. This could result from overwriting startup scripts or credential stores. Defenders should assess exposure and prioritize remediation [truncated]
