Wl Nu516u1 Firmware CVE-2026-2567
HIGHCVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionNVD
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub_401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
AnalysisAI
Remote code execution in Wavlink WL-NU516U1 firmware through a stack-based buffer overflow in the nas.cgi User1Passwd parameter allows unauthenticated network attackers to achieve full system compromise. Public exploit code exists for this vulnerability, and no patch is currently available, leaving affected devices at immediate risk.
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Inventory all Wavlink WL-NU516U1 devices in your environment and isolate them to trusted networks only; disable remote management access if not operationally critical. Within 7 days: Implement network segmentation to restrict access to /cgi-bin/nas.cgi endpoints; deploy WAF rules to block suspicious requests to this path; establish daily monitoring for exploit attempts. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today