VulnSocial

CVE-2026-8228Disclosure(wavlink / wl-nu516u1)

MEDIUMCVSS 8.8 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Patch wavlink wl-nu516u1 systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.

wavlink CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-77CWE-78

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • wl-nu516u1
  • wl-nu516u1_firmware

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 2 mentions (2026-05-10); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
wavlink
Products
wl-nu516u1wl-nu516u1_firmware

2 versions affected across 2 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-10: 2Mentions · 2026-08-15: 1Active Exploitation · 2026-08-15: 1Patch / Workaround · 2026-08-15: 1Technical Details · 2026-05-10: 205-1008-15
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-102
Disclosure2
2026-08-151
Patch1
Full discourse3 posts
  • ネスぺ社長（CCNA・CCNP攻略）@nespe_shacho
    Patch

    【ITニュース】Googleが8月14日、ChromeとChromeOS向けに緊急のセキュリティアップデートを公開。重大度「High」のゼロデイ脆弱性(CVE-2026-8228)が悪用を確認されており、即時アップデート推奨。ゼロデイとは、パッチ公開前から攻撃に使われている脆弱性のこと。発見されたら一刻も早い対応が必要で、これがセキュリティ運用の最優先タスクになる理由です。(出典: BleepingComputer/The Hacker News)

    Post summary

    Google issued an urgent update for CVE-2026-8228, a high‑severity zero‑day in Chrome/ChromeOS, after confirmed exploitation, emphasizing the need for immediate patching.

    00000114
    184 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8228 A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argum… https://www.cve.org/CVERecord?id=CVE-2026-8228

    Post summary

    The text announces CVE‑2026‑8228 affecting the Wavlink NU516U1 device, noting the impacted file and function, with no further details on exploitation or mitigation.

    00000117
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8228 OS Command Injection in Wavlink NU516U1 240425 Wireless CGI (Exploitation Disclosed) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8228

    Post summary

    The post announces the discovery of CVE-2026-8228 as an OS command injection in Wavlink NU516U1 240425 wireless CGI, providing technical details but no exploit code, patch, or evidence of active exploitation.

    0000049
    4.0K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
HWwavlinkwl-nu516u1---
OSwavlinkwl-nu516u1_firmwarem16u1_v240425--

Explore more

Back to dashboardwavlink CVEswl-nu516u1 vulnerabilities