GCVE - cpe:2.3:o:wavlink:wl-nu516u1_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:wavlink:wl-nu516u1_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Wavlink (`b3b0198b-0ff8-5498-8769-561cf3fe0e3d`)
Product	Wl Nu516U1 Firmware (`890026fb-f9f4-5b6a-843d-f5e49281265e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-15513`	vulnerable	2026-07-29 00:26:18.198551	Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection MEDIUM (6.3) A security flaw has been discovered in Wavlink WL-NU516U1 260515. This affects the function wlink_uci_set_value of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument lan_ip results in os command injection. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product. Published: 2026-07-12T23:30:15.048Z Updated: 2026-07-13T15:24:17.623Z Open on db.gcve.eu Reference links https://vuldb.com/vuln/377842 https://vuldb.com/vuln/377842/cti https://vuldb.com/cve/CVE-2026-15513 https://vuldb.com/submit/847517 https://github.com/0xcc12138/wavlink-nu516u1-csrf-command-injection-	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4861`	vulnerable	2026-06-08 08:07:02.548787	Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow HIGH (8.8) A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. Published: 2026-03-26T08:18:07.028Z Updated: 2026-03-26T18:28:13.605Z Open on db.gcve.eu Reference links https://vuldb.com/?id.353192 https://vuldb.com/?ctiid.353192 https://vuldb.com/?submit.776217 https://github.com/Wlz1112/WAVLINK-NU516U1-V260227/blob/main/Content-Length.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-4166`	vulnerable	2026-06-08 08:05:12.726204	Wavlink WL-NU516U1 login.cgi sub_404F68 cross site scripting LOW (3.5) A vulnerability was found in Wavlink WL-NU516U1 240425. The impacted element is the function sub_404F68 of the file /cgi-bin/login.cgi. The manipulation of the argument homepage/hostname results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure. Published: 2026-03-15T05:32:08.404Z Updated: 2026-03-17T13:46:28.034Z Open on db.gcve.eu Reference links https://vuldb.com/?id.351073 https://vuldb.com/?ctiid.351073 https://vuldb.com/?submit.769652 https://vuldb.com/?submit.769653 https://github.com/Litengzheng/vul_db/blob/main/WL-NU516U1/vul_14/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3662`	vulnerable	2026-06-08 08:01:19.145421	Wavlink WL-NU516U1 adm.cgi usb_p910 command injection MEDIUM (4.7) A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the argument Pr_mode leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure. Published: 2026-03-07T13:32:09.862Z Updated: 2026-03-11T16:29:28.566Z Open on db.gcve.eu Reference links https://vuldb.com/?id.349551 https://vuldb.com/?ctiid.349551 https://vuldb.com/?submit.758228 https://github.com/jinhao118/cve/blob/main/WAVLINK_2.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3661`	vulnerable	2026-06-08 08:01:19.142702	Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection MEDIUM (4.7) A flaw has been found in Wavlink WL-NU516U1 240425. This affects the function ota_new_upgrade of the file /cgi-bin/adm.cgi. This manipulation of the argument model causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure. Published: 2026-03-07T13:32:07.913Z Updated: 2026-03-11T16:29:34.044Z Open on db.gcve.eu Reference links https://vuldb.com/?id.349550 https://vuldb.com/?ctiid.349550 https://vuldb.com/?submit.758227 https://github.com/jinhao118/cve/blob/main/WAVLINK_1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3613`	vulnerable	2026-06-08 08:01:19.076399	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-3612`	vulnerable	2026-06-08 08:01:19.073738	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2615`	vulnerable	2026-06-08 07:55:17.289990	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2567`	vulnerable	2026-06-08 07:55:17.237146	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2566`	vulnerable	2026-06-08 07:55:17.236785	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-2565`	vulnerable	2026-06-08 07:55:17.235509	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.