2 CVEs
MEDIUM
CVSS 2.0
Wavlink WL-NU516U1 Command Injection
2026-03-07
CVE-2026-3662
LOW
POC
Command injection in Wavlink WL-NU516U1 firmware allows remote attackers with high privileges to execute arbitrary commands through the Pr_mode parameter in /cgi-bin/adm.cgi. Public exploit code exists for this vulnerability, and no patch is currently available. The impact is limited to confidentiality, integrity, and availability of the affected device.
2.0
CVSS
0.1%
EPSS
CVE-2026-3661
LOW
POC
Command injection in Wavlink WL-NU516U1 firmware allows remote attackers with high privileges to execute arbitrary commands through the model parameter in the OTA upgrade function. Public exploit code exists for this vulnerability, and no patch is currently available. The impact is limited to confidentiality, integrity, and availability of the affected device.
2.0
CVSS
0.1%
EPSS