Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-8191 Remote OS Command Injection in Wavlink NU516U1 M16U1_V240425 WiFi Region https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8191
Post summary
The brief entry lists CVE‑2026‑8191 with a short description of a remote OS command injection in a Wavlink router and links to a vulnerability database page, but contains no details on exploits, patches, or active use.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | wavlink | wl-nu516u1 | - | - | - |
| OS | wavlink | wl-nu516u1_firmware | m16u1_v240425 | - | - |