Approved changes feed: RSS · Atom

cpe:2.3:a:wavlink:wl-nu516u1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d)
ProductWl Nu516U1 (4c0fe506-5c65-52b3-b88a-905595cf315f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9149 vulnerable 2026-06-03 15:13:45.557693 Wavlink WL-NU516U1 wireless.cgi sub_4032E4 command injection
MEDIUM (6.3)
A vulnerability was determined in Wavlink WL-NU516U1 M16U1_V240425. This impacts the function sub_4032E4 of the file /cgi-bin/wireless.cgi. This manipulation of the argument Guest_ssid causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Published: 2025-08-19T17:32:06.085Z
Updated: 2025-08-19T20:02:23.147Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10775 vulnerable 2026-06-03 14:58:34.772685 Wavlink WL-NU516U1 login.cgi sub_4012A0 os command injection
MEDIUM (4.7)
A security vulnerability has been detected in Wavlink WL-NU516U1 240425. This vulnerability affects the function sub_4012A0 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-09-22T01:02:06.557Z
Updated: 2025-09-22T16:12:51.103Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.