CVE-2026-3703

A flaw has been found in Wavlink NU516U1 251208. This affects the function sub401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to out-of-bounds write. The attack may be performed from remote. The exploit has been published and may be used. Upgrading...

CVE-2026-3703

The CVE-2026-3703 entry concerns Wavlink NU516U1 (firmware 251208). The vulnerability is in /cgi-bin/login.cgi, function sub_401A10, where manipulating the ipaddr argument can cause an out-of-bounds write. It is network-exposed and can be exploited remotely; a public proof-of-concept exists. Upgr...