Approved changes feed: RSS · Atom

cpe:2.3:o:wavlink:wl-nu516u1_firmware:m16u1_v240425:*:*:*:*:*:*:*

part: o version: m16u1_v240425 update: *

VendorWavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d)
ProductWl Nu516U1 Firmware (890026fb-f9f4-5b6a-843d-f5e49281265e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8230 vulnerable 2026-06-08 08:08:58.219835 Wavlink NU516U1 login.cgi sys_login1 os command injection
MEDIUM (6.3)
A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
Published: 2026-05-10T04:30:09.029Z
Updated: 2026-05-11T14:53:10.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8229 vulnerable 2026-06-08 08:08:58.219416 Wavlink NU516U1 wireless.cgi WifiBasic os command injection
MEDIUM (6.3)
A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Published: 2026-05-10T04:15:09.652Z
Updated: 2026-05-11T15:00:57.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8228 vulnerable 2026-06-08 08:08:58.218981 Wavlink NU516U1 wireless.cgi advance os command injection
MEDIUM (6.3)
A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Published: 2026-05-10T04:00:08.818Z
Updated: 2026-05-12T02:33:15.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8227 vulnerable 2026-06-08 08:08:58.218378 Wavlink NU516U1 adm.cgi wzdapMesh os command injection
MEDIUM (6.3)
A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Published: 2026-05-10T03:45:08.687Z
Updated: 2026-05-11T17:03:20.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8192 vulnerable 2026-06-08 08:08:58.183383 Wavlink NU516U1 adm.cgi wzdap os command injection
MEDIUM (6.3)
A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/wl_Pass is directly passed by the attacker/so we can control the EncrypType/wl_Pass results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
Published: 2026-05-09T18:30:11.631Z
Updated: 2026-05-11T15:11:41.012Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8191 vulnerable 2026-06-08 08:08:58.182808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8190 vulnerable 2026-06-08 08:08:58.182299 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8189 vulnerable 2026-06-08 08:08:58.181772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8188 vulnerable 2026-06-08 08:08:58.180276 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3662 vulnerable 2026-06-08 08:01:19.145576 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3661 vulnerable 2026-06-08 08:01:19.142847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3613 vulnerable 2026-06-08 08:01:19.076565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3612 vulnerable 2026-06-08 08:01:19.074727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-9149 vulnerable 2026-06-08 07:45:21.802436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10964 vulnerable 2026-06-08 07:02:27.862665 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10963 vulnerable 2026-06-08 07:02:27.862135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10962 vulnerable 2026-06-08 07:02:27.861607 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10961 vulnerable 2026-06-08 07:02:27.861085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10960 vulnerable 2026-06-08 07:02:27.860462 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10959 vulnerable 2026-06-08 07:02:27.860041 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10958 vulnerable 2026-06-08 07:02:27.859431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10775 vulnerable 2026-06-08 07:02:27.495782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.