Advisories · Technology

Wavlink WL-NU516U1.

Every CVE that names Wavlink WL-NU516U1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-18590 CVE record

CVSS 5.3 Medium

Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection
- Wavlink WL-NU516U1
- Command injection
Not analysed yet 3 Aug 2026
CVE-2026-18589 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow
- Wavlink WL-NU516U1
- Memory corruption
Not analysed yet 3 Aug 2026
CVE-2026-18588 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Wavlink WL-NU516U1 nas.cgi fgets stack-based overflow
- Wavlink WL-NU516U1
- Memory corruption
Not analysed yet 3 Aug 2026
CVE-2026-18587 CVE record

CVSS 7.7 High

Wavlink WL-NU516U1 Config Import os command injection
- Wavlink WL-NU516U1
- Command injection
Not analysed yet 3 Aug 2026
CVE-2026-15513 CVE record

CVSS 5.3 Medium

Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection
- Wavlink WL-NU516U1
- Command injection
Not analysed yet 12 Jul 2026
CVE-2026-4861 CVE record

CVSS 8.7 High

Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow
- Wavlink WL-NU516U1
- Memory corruption
Not analysed yet 26 Mar 2026
CVE-2026-4166 CVE record

CVSS 5.1 Medium

Wavlink WL-NU516U1 login.cgi sub_404F68 cross site scripting
- Wavlink WL-NU516U1
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 15 Mar 2026
CVE-2026-3662 CVE record

CVSS 5.1 Medium

Wavlink WL-NU516U1 adm.cgi usb_p910 command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
Not analysed yet 7 Mar 2026
CVE-2026-3661 CVE record

CVSS 5.1 Medium

Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
Not analysed yet 7 Mar 2026
CVE-2026-3613 CVE record

CVSS 8.6 High

Wavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflow
- Wavlink WL-NU516U1
- Memory corruption
Not analysed yet 6 Mar 2026
CVE-2026-3612 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
Not analysed yet 6 Mar 2026
CVE-2026-2615 CVE record

CVSS 8.6 HighCritical · CVSS 7+ and EPSS

Wavlink WL-NU516U1 firewall.cgi singlePortForwardDelete command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
Not analysed yet 17 Feb 2026
CVE-2026-2567 CVE record

CVSS 8.6 High

Wavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflow
- Wavlink WL-NU516U1
- Memory corruption
Not analysed yet 16 Feb 2026
CVE-2026-2566 CVE record

CVSS 8.6 High

Wavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflow
- Wavlink WL-NU516U1
- Memory corruption
Not analysed yet 16 Feb 2026
CVE-2026-2565 CVE record

CVSS 7.5 High

Wavlink WL-NU516U1 adm.cgi sub_40785C stack-based overflow
- Wavlink WL-NU516U1
- Memory corruption
Not analysed yet 16 Feb 2026
CVE-2025-10775 CVE record

CVSS 5.1 Medium

Wavlink WL-NU516U1 login.cgi sub_4012A0 os command injection
- Wavlink WL-NU516U1
- Command injection
Not analysed yet 22 Sept 2025
CVE-2025-9149 CVE record

CVSS 5.3 Medium

Wavlink WL-NU516U1 wireless.cgi sub_4032E4 command injection
- Wavlink WL-NU516U1
- Other injection
- Command injection
Not analysed yet 19 Aug 2025