CVE-2026-8191
MediumCVSS 6.3Exploitation Probability (EPSS)
Very high risk92th percentile - higher than 92% of all known CVEs
Summary
An OS command injection vulnerability was identified in Wavlink NU516U1 M16U1_V240425 in the wifi_region function of /cgi-bin/adm.cgi. Manipulating arguments skiplist1/skiplist2 allows remote command execution. The exploit is publicly available.
Risk Assessment
A remote attacker can take control of the device, potentially leading to network compromise and data breach.
Recommendation
Apply the vendor's patch immediately or disconnect the device from the network until a patch is available.
Other vulnerabilities in Wavlink NU516U1
See all- CVE-2026-8230Medium
An OS command injection vulnerability was found in Wavlink NU516U1 240425 in the sys_login1 function of /cgi-bin/login.cgi. Manipulating the ipaddr argument allows remote command execution. The exploit has been published.
- CVE-2026-8229Medium
An OS command injection vulnerability was detected in Wavlink NU516U1 240425 in the WifiBasic function of /cgi-bin/wireless.cgi. Manipulating arguments AuthMethod/EncrypType allows remote command execution. The exploit is publicly available.
- CVE-2026-8228Medium
A security vulnerability has been detected in Wavlink NU516U1 240425. The function advance in the file /cgi-bin/wireless.cgi is affected by OS command injection via manipulation of arguments wlan_conf, Channel, skiplist, or ieee_80211h. The attack can be launched remotely and the exploit has been disclosed.
- CVE-2026-8227Medium
An OS command injection vulnerability was identified in Wavlink NU516U1 240425 in the wzdapMesh function of /cgi-bin/adm.cgi. The attack can be performed remotely. The exploit has been made public.
- CVE-2026-8192Medium
An OS command injection vulnerability was found in Wavlink NU516U1 M16U1_V240425 in the wzdap function of /cgi-bin/adm.cgi. Manipulating arguments EncrypType/wl_Pass allows remote command execution. The exploit has been published.
- CVE-2026-8190Medium
An OS command injection vulnerability was found in Wavlink NU516U1 M16U1_V240425 in the wan function of /cgi-bin/adm.cgi. Manipulating arguments ppp_username, ppp_passwd, rwan_ip, rwan_mask, rwan_gateway allows remote command execution. The exploit has been disclosed.
- CVE-2026-8189Medium
A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The function wzdrepeater in the file /cgi-bin/adm.cgi is affected by OS command injection via manipulation of arguments wlan_bssid, sel_Automode, or sel_EncrypTyp. The attack can be launched remotely and the exploit has been made public.
- CVE-2026-8188Medium
An OS command injection vulnerability was found in Wavlink NU516U1 M16U1_V240425 in the change_wifi_password function of /cgi-bin/adm.cgi. Manipulating arguments wl_channel, wl_Pass, EncrypType allows remote command execution. The exploit has been disclosed.
Original NVD description (English source)
A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.