Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-8227 A weakness has been identified in Wavlink NU516U1 240425. This issue affects the function wzdapMesh of the file /cgi-bin/adm.cgi. This manipulation causes os command in… https://www.cve.org/CVERecord?id=CVE-2026-8227
Post summary
The post announces a weakness in Wavlink NU516U1's wzdapMesh function that could lead to OS command injection, with technical details linked to a CVE record.
CVE-2026-8227 OS Command Injection in Wavlink NU516U1 240425 wzdapMesh Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8227
Post summary
The provided text identifies a specific OS command injection vulnerability (CVE-2026-8227) in a Wavlink device, but offers no PoC, exploit code, patch information, or evidence of active exploitation.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | wavlink | wl-nu516u1 | - | - | - |
| OS | wavlink | wl-nu516u1_firmware | m16u1_v240425 | - | - |