Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the argument Pr_mode leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-3662 A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the arg… https://www.cve.org/CVERecord?id=CVE-2026-3662
Post summary
A new vulnerability (CVE‑2026‑3662) affecting the usb_p910 function in Wavlink WL‑NU516U1's admin CGI has been reported.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3662 - Wavlink WL-NU516U1 adm.cgi usb_p910 command injection Intel Report: https://ift.tt/I0WmJRB
Post summary
The alert announces a new CVE‑2026‑3662 involving command injection on Wavlink WL‑NU516U1’s adm.cgi, but offers no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-3662 Command Injection in Wavlink WL-NU516U1 Router via Unauthenticated CGI Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3662
Post summary
The text announces CVE-2026-3662, highlighting a command injection flaw in Wavlink WL‑NU516U1 routers that can be exploited via an unauthenticated CGI parameter.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | wavlink | wl-nu516u1 | - | - | - |
| OS | wavlink | wl-nu516u1_firmware | m16u1_v240425 | - | - |