VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 25, 2025· Updated Sep 25, 2025

Wavlink NU516U1 Delete_Mac_list wireless.cgi sub_4030C0 command injection

CVE-2025-10961

Description

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete_Mac_list Page. Executing manipulation of the argument delete_list can lead to command injection. The vendor was contacted early about this disclosure but did not respond in any way.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Wavlink/NU516U1llm-fuzzy2 versions
    = M16U1_V240425+ 1 more
    • (no CPE)range: = M16U1_V240425
    • (no CPE)range: M16U1_V240425

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.