CVE-2026-8228
MediumCVSS 6.3Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
A security vulnerability has been detected in Wavlink NU516U1 240425. The function advance in the file /cgi-bin/wireless.cgi is affected by OS command injection via manipulation of arguments wlan_conf, Channel, skiplist, or ieee_80211h. The attack can be launched remotely and the exploit has been disclosed.
Risk Assessment
A remote attacker could gain full control over the device, potentially leading to network compromise, data theft, or use of the device in a botnet.
Recommendation
Immediately update the device firmware to the latest version if a patch is available. Otherwise, consider decommissioning the device.
Other vulnerabilities in Wavlink NU516U1
See all- CVE-2026-8230Medium
An OS command injection vulnerability was found in Wavlink NU516U1 240425 in the sys_login1 function of /cgi-bin/login.cgi. Manipulating the ipaddr argument allows remote command execution. The exploit has been published.
- CVE-2026-8229Medium
An OS command injection vulnerability was detected in Wavlink NU516U1 240425 in the WifiBasic function of /cgi-bin/wireless.cgi. Manipulating arguments AuthMethod/EncrypType allows remote command execution. The exploit is publicly available.
- CVE-2026-8227Medium
An OS command injection vulnerability was identified in Wavlink NU516U1 240425 in the wzdapMesh function of /cgi-bin/adm.cgi. The attack can be performed remotely. The exploit has been made public.
- CVE-2026-8192Medium
An OS command injection vulnerability was found in Wavlink NU516U1 M16U1_V240425 in the wzdap function of /cgi-bin/adm.cgi. Manipulating arguments EncrypType/wl_Pass allows remote command execution. The exploit has been published.
- CVE-2026-8191Medium
An OS command injection vulnerability was identified in Wavlink NU516U1 M16U1_V240425 in the wifi_region function of /cgi-bin/adm.cgi. Manipulating arguments skiplist1/skiplist2 allows remote command execution. The exploit is publicly available.
- CVE-2026-8190Medium
An OS command injection vulnerability was found in Wavlink NU516U1 M16U1_V240425 in the wan function of /cgi-bin/adm.cgi. Manipulating arguments ppp_username, ppp_passwd, rwan_ip, rwan_mask, rwan_gateway allows remote command execution. The exploit has been disclosed.
- CVE-2026-8189Medium
A vulnerability was found in Wavlink NU516U1 M16U1_V240425. The function wzdrepeater in the file /cgi-bin/adm.cgi is affected by OS command injection via manipulation of arguments wlan_bssid, sel_Automode, or sel_EncrypTyp. The attack can be launched remotely and the exploit has been made public.
- CVE-2026-8188Medium
An OS command injection vulnerability was found in Wavlink NU516U1 M16U1_V240425 in the change_wifi_password function of /cgi-bin/adm.cgi. Manipulating arguments wl_channel, wl_Pass, EncrypType allows remote command execution. The exploit has been disclosed.
Original NVD description (English source)
A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.