VulnSocial

CVE-2026-8189Disclosure(wavlink / wl-nu516u1)

LOWCVSS 8.8 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

wavlink CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wl-nu516u1
  • wl-nu516u1_firmware

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
wavlink
Products
wl-nu516u1wl-nu516u1_firmware

2 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-09: 3Technical Details · 2026-05-09: 205-09
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Disclosure

    💥 OS command injection in Wavlink NU516U1 via wzdrepeater function allows remote attackers to execute arbitrary commands. #CVE #RCE #IoT https://nvd.nist.gov/vuln/detail/CVE-2026-8189

    Post summary

    The tweet announces an OS command injection vulnerability in the Wavlink NU516U1 device, detailing the affected wzdrepeater function and the ability for remote attackers to execute arbitrary commands.

    000003
    1.3K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8189 A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of… https://www.cve.org/CVERecord?id=CVE-2026-8189

    Post summary

    A vulnerability impacting the wzdrepeater function in Wavlink’s NU516U1 device was identified, but no exploitation details, patch information, or evidence of active exploitation were provided.

    0000049
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8189 OS Command Injection in Wavlink NU516U1 M16U1_V240425 /cgi-bin/adm.cgi https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8189

    Post summary

    CVE-2026-8189 is disclosed as an OS Command Injection in a Wavlink device, with no PoC, exploit, or patch details provided.

    0000046
    4.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWwavlinkwl-nu516u1---
OSwavlinkwl-nu516u1_firmwarem16u1_v240425--

Explore more

Back to dashboardwavlink CVEswl-nu516u1 vulnerabilities