A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
References
| Link | Resource |
|---|---|
| https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_8/8.md | Exploit Third Party Advisory |
| https://vuldb.com/submit/800734 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/362446 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/362446/cti | Permissions Required VDB Entry |
Configurations
Configuration 1 (hide)
| AND |
|
History
12 May 2026, 17:37
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Wavlink
Wavlink wl-nu516u1 Wavlink wl-nu516u1 Firmware |
|
| CPE | cpe:2.3:h:wavlink:wl-nu516u1:-:*:*:*:*:*:*:* cpe:2.3:o:wavlink:wl-nu516u1_firmware:m16u1_v240425:*:*:*:*:*:*:* |
|
| References | () https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_8/8.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/submit/800734 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/362446 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/362446/cti - Permissions Required, VDB Entry |
10 May 2026, 05:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-10 05:16
Updated : 2026-05-12 17:37
NVD link : CVE-2026-8229
Mitre link : CVE-2026-8229
CVE.ORG link : CVE-2026-8229
JSON object : View
Products Affected
wavlink
- wl-nu516u1_firmware
- wl-nu516u1