Wl Nu516U1 A
Approved changes feed: RSS · Atom
cpe:2.3:a:wavlink:wl-nu516u1-a:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Wavlink (b3b0198b-0ff8-5498-8769-561cf3fe0e3d) |
|---|---|
| Product | Wl Nu516U1 A (fc7393c0-aff1-5e3d-9ab0-7c7b2d2ce5f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-13539 |
vulnerable | 2026-07-29 00:23:33.153868 |
Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow
HIGH (8.8)
A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the function sub_407504 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. Such manipulation of the argument Guest_ssid leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Published: 2026-06-29T05:30:09.451Z
Updated: 2026-06-29T14:52:41.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13538 |
vulnerable | 2026-07-29 00:23:33.153662 |
Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection
MEDIUM (6.3)
A vulnerability was determined in Wavlink WL-NU516U1-A M16U1_V240425. The affected element is the function sub_401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Published: 2026-06-29T05:15:13.662Z
Updated: 2026-06-29T13:48:00.057Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.