Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 2 products
CVE-2026-8229 A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of t… https://www.cve.org/CVERecord?id=CVE-2026-8229
Post summary
The notice reports the discovery of CVE‑2026‑8229 in a Wavlink device but provides no further details on exploitation, mitigation, or technical specifics.
CVE-2026-8229 Remote OS Command Injection in Wavlink NU516U1 240425 WifiBasic Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8229
Post summary
The text announces CVE-2026-8229, a remote OS command injection issue in Wavlink NU516U1 devices, without discussing PoC, exploit tools, active use, or patching.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| HW | wavlink | wl-nu516u1 | - | - | - |
| OS | wavlink | wl-nu516u1_firmware | m16u1_v240425 | - | - |