A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway is directly passed by the attacker/so we can control the ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_channel/wl_Pass/EncrypType leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
CVE-2026-7692 is a command injection vulnerability in the Wavlink WL-WN570HA1 router, specifically in the ping_ddns function of the /cgi-bin/adm.cgi file. The vulnerability allows remote attackers to manipulate the DDNS argument to execute arbitrary commands. The affected firmware version R70HA1 V1410_221110 has been removed from the vendor's website and is no longer supported. No official patch or remediation is available. The vulnerability has a medium severity with a CVSS score of 5.3. Exploits are publicly known but not confirmed in the wild. This issue affects only unsupported devices.
CVE-2026-7691 is a command injection vulnerability in the Wavlink WL-WN570HA1 router firmware version R70HA1 V1410_221110. The flaw exists in the set_sys_cmd function within /cgi-bin/adm.cgi, allowing remote attackers to manipulate command arguments and execute arbitrary commands. The affected firmware version has been removed from the vendor's website and is no longer supported. No official patch or remediation has been provided. The vulnerability has a medium severity rating with a CVSS score of 5.3. There is no evidence of exploitation in the wild at this time.
CVE-2026-7690 is a command injection vulnerability in the Wavlink WL-WN570HA1 router firmware version R70HA1 V1410_221110. The flaw exists in the set_sys_adm function of /cgi-bin/adm.cgi, where manipulation of the Username argument allows remote command injection. The affected firmware version has been removed from the vendor's website and is no longer supported. There is no official patch or remediation available. The vulnerability has a medium severity score of 5.3 and an exploit is publicly available, but no known active exploitation in the wild has been reported.
A weakness has been identified in Wavlink WL-WN579A3 220323. This affects the function sub_401F80 of the file /cgi-bin/login.cgi. This manipulation of the argument Hostname causes cross site scripting. Remote exploitation of the attack is possible. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
CVE-2026-6483 is a high-severity OS command injection vulnerability in the Wavlink WL-WN530H4 device, specifically affecting the strcat and snprintf functions in the /cgi-bin/internet.cgi file. This vulnerability allows remote attackers to execute arbitrary OS commands. The issue affects version 20220721 and can be resolved by upgrading to version 2026.04.16. No official remediation level or patch link is provided in the data, but upgrading is recommended to mitigate the risk.
A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This impacts the function sub_4019FC of the file /cgi-bin/firewall.cgi of the component UPNP Handler. Executing a manipulation of the argument UpnpEnabled can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
A vulnerability was determined in Wavlink WL-WN578W2 221110. This affects an unknown function of the file /cgi-bin/login.cgi of the component POST Request Handler. Executing a manipulation of the argument homepage/hostname/login_page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2026-4543 is a medium severity command injection vulnerability in the Wavlink WL-WN578W2 router firmware version 221110. The flaw exists in the /cgi-bin/firewall.cgi POST request handler, where manipulation of the dmz_flag or del_flag parameters can lead to remote command execution without authentication or user interaction. The vulnerability allows attackers to execute arbitrary commands on the device, potentially compromising its integrity and availability. Although the vendor has not responded to disclosure, no public exploits are currently known in the wild. This vulnerability affects network security devices commonly deployed in small office and home office environments, posing risks of device takeover and network compromise. Organizations using this device should prioritize mitigation to prevent exploitation. Countries with significant Wavlink market presence and reliance on this model are at higher risk. The CVSS 4.0 score is 5.
A vulnerability was found in Wavlink WL-NU516U1 240425. The impacted element is the function sub_404F68 of the file /cgi-bin/login.cgi. The manipulation of the argument homepage/hostname results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
A flaw has been found in Wavlink WL-WN578W2 221110. Impacted is the function Delete_Mac_list/SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Executing a manipulation can lead to command injection. It is possible to launch the attack remotely. The exploit has been published and may be used. It is recommended to upgrade the affected component.
A vulnerability was detected in Wavlink WL-WN579A3 220323. This issue affects the function SetName/GuestWifi of the file /cgi-bin/wireless.cgi of the component POST Request Handler. Performing a manipulation results in command injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Upgrading the affected component is recommended.
A vulnerability was determined in Wavlink WL-WN579X3-C 231124. This vulnerability affects the function sub_401AD4 of the file /cgi-bin/adm.cgi. Executing a manipulation of the argument Hostname can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 20260226 is able to resolve this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub_40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument del_flag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 20260226 is able to mitigate this issue. You should upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to out-of-bounds write. The attack may be performed from remote. The exploit has been published and may be used. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub_405B2C of the file /cgi-bin/firewall.cgi of the component Incomplete Fix CVE-2025-10959. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the argument Pr_mode leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.