CVE-2026-3612

A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmwareurl causes command injection. It is possible to initiate the attack remotely. The exploit h...

CVE-2026-2566

CVE-2026-2566 affects Wavlink WL-NU516U1 (firmware up to 130/260). The vulnerability resides in function sub_406194 within /cgi-bin/adm.cgi where manipulation of the firmware_url argument causes a stack-based buffer overflow. Impact is described as remote code execution-like overflow with high se...