Wavlink Wl Nu516U1 vulnerabilities, page 2
35 vulnerabilities
Known vulnerabilities in Wavlink Wl Nu516U1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2026-8230wavlink · nu516u1 +1 moreWavlink NU516U1 login.cgi sys_login1 os command injectionA flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8191wavlink · nu516u1 +1 moreWavlink NU516U1 adm.cgi wifi_region os command injectionA vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8192wavlink · nu516u1 +1 moreWavlink NU516U1 adm.cgi wzdap os command injectionA security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/wl_Pass is directly passed by the attacker/so we can control the EncrypType/wl_Pass results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8228wavlink · nu516u1 +1 moreWavlink NU516U1 wireless.cgi advance os command injectionA security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8189wavlink · nu516u1 +1 moreWavlink NU516U1 adm.cgi wzdrepeater os command injectionA vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8229wavlink · nu516u1 +1 moreWavlink NU516U1 wireless.cgi WifiBasic os command injectionA vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8190wavlink · nu516u1 +1 moreWavlink NU516U1 adm.cgi wan os command injectionA vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway is directly passed by the attacker/so we can control the ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8188wavlink · nu516u1 +1 moreWavlink NU516U1 adm.cgi change_wifi_password os command injectionA vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_channel/wl_Pass/EncrypType leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-8227wavlink · nu516u1 +1 moreWavlink NU516U1 adm.cgi wzdapMesh os command injectionA weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.EPSS8.51%HighCVE-2026-3704wavlink · nu516u1 +1 moreWavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injectionA vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub_405B2C of the file /cgi-bin/firewall.cgi of the component Incomplete Fix CVE-2025-10959. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.EPSS5.52%HighCVE-2026-3662wavlink · wl-nu516u1_firmwareWavlink WL-NU516U1 adm.cgi usb_p910 command injectionA vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the argument Pr_mode leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.EPSS11.34%HighCVE-2026-3661wavlink · wl-nu516u1_firmwareWavlink WL-NU516U1 adm.cgi ota_new_upgrade command injectionA flaw has been found in Wavlink WL-NU516U1 240425. This affects the function ota_new_upgrade of the file /cgi-bin/adm.cgi. This manipulation of the argument model causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.EPSS11.34%CriticalCVE-2026-3703wavlink · nu516u1 +1 moreWavlink NU516U1 login.cgi sub_401A10 out-of-bounds writeA flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to out-of-bounds write. The attack may be performed from remote. The exploit has been published and may be used. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.EPSS1.26%HighCVE-2026-3612wavlink · wl-nu516u1_firmwareWavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injectionA vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmware_url causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.EPSS10.39%HighCVE-2026-3613wavlink · wl-nu516u1_firmwareWavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflowA vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.EPSS1.17%