PT-2026-39454 · Wavlink · Nu516U1

Ziyue Xie · Published 2026-05-10 · Updated 2026-05-10 · CVE-2026-8228

NVD

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan conf/Channel/skiplist/ieee 80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

Exploit

Fix

Command Injection

OS Command Injection

Weakness Enumeration

CWE-77

CWE-78

Related Identifiers

CVE-2026-8228

Affected Products

Nu516U1

References · 5

• 🔥 https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_7/7.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8228 · Security Note
• https://vuldb.com/vuln/362445 · Note
• https://vuldb.com/submit/800733 · Note
• https://vuldb.com/vuln/362445/cti · Note