CVE-2026-8190 Wavlink NU516U1 adm.cgi wan os command injection

A vulnerability was determined in Wavlink NU516U1 M16U1V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument pppusername/ppppasswd/rwanip/rwanmask/rwangateway is directly passed by the attacker/so we can control the...

CVE-2022-35517

WAVLINK WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3 adm.cgi has no filtering on parameters: webpskValue, wlMethod, wlanssid, EncrypType, rwanip, rwanmask, rwangateway, pppusername, ppppasswd and pppsetver, which leads to command injection in page /wizardroutermesh.shtml...

CVE-2022-35522

The CVE-2022-35522 issue affects WAVLINK devices (WN572HP3, WN533A8, WN530H4, WN535G3, WN531P3). Root cause: adm.cgi does not filter on parameters ppp_username, ppp_passwd, rwan_gateway, rwan_mask, and rwan_ip, enabling command injection in the /wan.shtml page. Impact is described as high in CVSS...