CVE-2026-3612

A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmwareurl causes command injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2026-3612: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmwareurl causes command injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2026-2566

CVE-2026-2566 affects Wavlink WL-NU516U1 (firmware up to 130/260). The vulnerability resides in function sub_406194 within /cgi-bin/adm.cgi where manipulation of the firmware_url argument causes a stack-based buffer overflow. Impact is described as remote code execution-like overflow with high se...

CVE-2026-2566: Stack-based Buffer Overflow

A security vulnerability has been detected in Wavlink WL-NU516U1 up to 130/260. This affects the function sub406194 of the file /cgi-bin/adm.cgi. Such manipulation of the argument firmwareurl leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed...