Threats tagged 'ghsa-g32f-8qr6-x525'

CVE-2026-18587 is a high-severity OS command injection vulnerability in the Wavlink WL-NU516U1 device, specifically in an unknown function of the Config Import component. The vulnerability arises from manipulation of the Password argument, allowing remote attackers to execute OS commands. Exploitation is considered difficult due to high complexity, but a public exploit exists. The vendor responded promptly and released a fixed version.