CVE-2026-3703

🗓️ 08 Mar 2026 04:32:09Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 5 Views🌐 WEB

CVE 2026-3703: Wavlink NU516U1 login.cgi allows out-of-bounds write via ipaddr; upgrade to fixed version.

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2026-3703	8 Mar 202604:32	–	attackerkb
Circl	CVE-2026-3703	7 Mar 202609:04	–	circl
CNNVD	Wavlink NU516U1 缓冲区错误漏洞	8 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-3703 Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write	8 Mar 202604:32	–	cvelist
EUVD	EUVD-2026-10211	8 Mar 202606:31	–	euvd
NVD	CVE-2026-3703	8 Mar 202605:16	–	nvd
Positive Technologies	PT-2026-23858	7 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-3703	9 Mar 202608:02	–	redhatcve
Vulnrichment	CVE-2026-3703 Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write	8 Mar 202604:32	–	vulnrichment

NVD

Vulners

Node

wavlink wl-nu516u1_firmwareMatch251208

AND

wavlink wl-nu516u1Match-

[
  {
    "vendor": "Wavlink",
    "product": "NU516U1",
    "versions": [
      {
        "version": "251208",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/ipaddr.md
vuldb	www.vuldb.com/
dl	www.dl.wavlink.com/firmware/RD/WINSTAR_NU516U1-WO-A-2026-02-27-2fcf6ae-mt7628-squashfs-sysupgrade.bin
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/ipaddr.md

Parameter	Position	Path	Description	CWE
ipaddr	query param	/cgi-bin/login.cgi	Out-of-bounds write caused by manipulation of the ipaddr argument in /cgi-bin/login.cgi leading to remote exploitability.	CWE-119, CWE-787

10 Mar 2026 18:55Current

7High risk

Vulners AI Score7

CVSS 49.3

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.00295

SSVC