CVE-2025-10960

A vulnerability was found in Wavlink NU516U1 M16U1V240425. The impacted element is the function sub402D1C of the file /cgi-bin/wireless.cgi of the component DeleteMac Page. Performing manipulation of the argument deletelist results in command injection. The attack is possible to be carried out...

CVE-2025-10960

CVE-2025-10960 affects Wavlink NU516U1 M16U1_V240425. The vulnerability resides in the DeleteMac Page’s /cgi-bin/wireless.cgi, specifically the function sub_402D1C, where manipulating the delete_list argument enables remote command injection. Public exploit details exist; exploitation is describe...

Wavlink NU516U1 命令注入漏洞

Wavlink NU516U1 is a wireless print server from China Ruiyin Wavlink. A command injection vulnerability exists in the Wavlink NU516U1 M16U1V240425 version, which stems from incorrect operation of the parameter deletelist of the component DeleteMac Page in the file /cgi-bin/wireless.cgi, which cou...

PT-2025-39435

Name of the Vulnerable Software and Affected Versions Wavlink NU516U1 M16U1 V240425 Description A flaw exists in the function sub 402D1C within the /cgi-bin/wireless.cgi file, specifically in the DeleteMac Page component. Manipulation of the delete list argument can lead to command injection. Thi...