Wavlink NU516U1 Arbitrary Command Execution

The vulnerability of sub4016F0 in the microprogrammed Wavlink NU516U1 router software is related to the failure to take measures for data cleaning at the control level when processing the delflag argument. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands via PO...

CVE-2025-10963

A security flaw has been discovered in Wavlink NU516U1 M16U1V240425. Affected is the function sub4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument delflag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the publ...