EUVD-2026-10208

A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub405B2C of the file /cgi-bin/firewall.cgi of the component Incomplete Fix CVE-2025-10959. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit ha...

CVE-2026-3704

CVE-2026-3704 affects Wavlink NU516U1 251208 via /cgi-bin/firewall.cgi, targeting sub_405B2C with a command-injection flaw in the Incomplete Fix CVE-2025-10959. Exploitation is remote and the exploit has been disclosed publicly. Upgrading to the fixed component is recommended. Public references i...

CVE-2026-3704: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub405B2C of the file /cgi-bin/firewall.cgi of the component Incomplete Fix CVE-2025-10959. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit ha...