Medium severity6.3NVD Advisory· Published May 9, 2026· Updated May 13, 2026
CVE-2026-8189
CVE-2026-8189
Description
A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_2/2.mdnvdExploitThird Party Advisory
- vuldb.com/submit/800728nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/362341nvdThird Party AdvisoryVDB Entry
- vuldb.com/vuln/362341/ctinvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.