Nu516U1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wavlink:nu516u1:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorWavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d)
ProductNu516U1 (2b838d8b-3b7e-578b-bf56-b81231a00f57)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8230 vulnerable 2026-06-08 08:08:58.219806 Wavlink NU516U1 login.cgi sys_login1 os command injection
MEDIUM (6.3)
A flaw has been found in Wavlink NU516U1 240425. The impacted element is the function sys_login1 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
Published: 2026-05-10T04:30:09.029Z
Updated: 2026-05-11T14:53:10.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8229 vulnerable 2026-06-08 08:08:58.219387 Wavlink NU516U1 wireless.cgi WifiBasic os command injection
MEDIUM (6.3)
A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Published: 2026-05-10T04:15:09.652Z
Updated: 2026-05-11T15:00:57.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8228 vulnerable 2026-06-08 08:08:58.218833 Wavlink NU516U1 wireless.cgi advance os command injection
MEDIUM (6.3)
A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Published: 2026-05-10T04:00:08.818Z
Updated: 2026-05-12T02:33:15.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8227 vulnerable 2026-06-08 08:08:58.218345 Wavlink NU516U1 adm.cgi wzdapMesh os command injection
MEDIUM (6.3)
A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Published: 2026-05-10T03:45:08.687Z
Updated: 2026-05-11T17:03:20.576Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8192 vulnerable 2026-06-08 08:08:58.183350 Wavlink NU516U1 adm.cgi wzdap os command injection
MEDIUM (6.3)
A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/wl_Pass is directly passed by the attacker/so we can control the EncrypType/wl_Pass results in os command injection. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure.
Published: 2026-05-09T18:30:11.631Z
Updated: 2026-05-11T15:11:41.012Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8191 vulnerable 2026-06-08 08:08:58.182776 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8190 vulnerable 2026-06-08 08:08:58.182263 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8189 vulnerable 2026-06-08 08:08:58.181647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8188 vulnerable 2026-06-08 08:08:58.178989 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3704 vulnerable 2026-06-08 08:01:19.211735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3703 vulnerable 2026-06-08 08:01:19.209942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10964 vulnerable 2026-06-08 07:02:27.862630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10963 vulnerable 2026-06-08 07:02:27.861979 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10962 vulnerable 2026-06-08 07:02:27.861460 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10961 vulnerable 2026-06-08 07:02:27.861050 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10960 vulnerable 2026-06-08 07:02:27.860423 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10959 vulnerable 2026-06-08 07:02:27.860007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10958 vulnerable 2026-06-08 07:02:27.859379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.