https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-8192.htmlhttps://patchthecve.com/cve/CVE-2026-8192.htmlFri, 24 Jul 2026 08:10:00 +0000MEDIUM 6.3: A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. This vulnerability affects the function wzdap of the file /cgi-bin/adm.cgi. Performing a manipulation of the argument EncrypType/wl_Pass is directly passed by the attacker/so we can control the EncrypType/wl_Pass results in os comhttps://patchthecve.com/cve/CVE-2026-8191.htmlhttps://patchthecve.com/cve/CVE-2026-8191.htmlFri, 24 Jul 2026 08:10:00 +0000MEDIUM 6.3: A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might bhttps://patchthecve.com/cve/CVE-2026-8190.htmlhttps://patchthecve.com/cve/CVE-2026-8190.htmlFri, 24 Jul 2026 08:10:00 +0000MEDIUM 6.3: A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway is directly passed by the attacker/so we can control the ppp_username/ppphttps://patchthecve.com/cve/CVE-2026-8189.htmlhttps://patchthecve.com/cve/CVE-2026-8189.htmlFri, 24 Jul 2026 08:10:00 +0000MEDIUM 6.3: A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is possible to launch the attack remotely. Thttps://patchthecve.com/cve/CVE-2026-8188.htmlhttps://patchthecve.com/cve/CVE-2026-8188.htmlFri, 24 Jul 2026 08:10:00 +0000MEDIUM 6.3: A vulnerability has been found in Wavlink NU516U1 M16U1_V240425. Affected is the function change_wifi_password of the file /cgi-bin/adm.cgi. The manipulation of the argument wl_channel/wl_Pass/EncrypType leads to os command injection. It is possible to initiate the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2026-4861.htmlhttps://patchthecve.com/cve/CVE-2026-4861.htmlWed, 17 Jun 2026 10:57:21 +0000HIGH 8.8: A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to thttps://patchthecve.com/cve/CVE-2026-3703.htmlhttps://patchthecve.com/cve/CVE-2026-3703.htmlWed, 17 Jun 2026 10:44:02 +0000CRITICAL 9.8: A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to out-of-bounds write. The attack may be performed from remote. The exploit has been published and may be used. Upgrading thhttps://patchthecve.com/cve/CVE-2026-3704.htmlhttps://patchthecve.com/cve/CVE-2026-3704.htmlWed, 17 Jun 2026 10:44:02 +0000MEDIUM 4.7: A vulnerability has been found in Wavlink NU516U1 251208. This vulnerability affects the function sub_405B2C of the file /cgi-bin/firewall.cgi of the component Incomplete Fix CVE-2025-10959. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has https://patchthecve.com/cve/CVE-2026-3662.htmlhttps://patchthecve.com/cve/CVE-2026-3662.htmlWed, 17 Jun 2026 10:43:56 +0000MEDIUM 4.7: A vulnerability has been found in Wavlink WL-NU516U1 240425. This vulnerability affects the function usb_p910 of the file /cgi-bin/adm.cgi. Such manipulation of the argument Pr_mode leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publichttps://patchthecve.com/cve/CVE-2026-3661.htmlhttps://patchthecve.com/cve/CVE-2026-3661.htmlWed, 17 Jun 2026 10:43:56 +0000MEDIUM 4.7: A flaw has been found in Wavlink WL-NU516U1 240425. This affects the function ota_new_upgrade of the file /cgi-bin/adm.cgi. This manipulation of the argument model causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor washttps://patchthecve.com/cve/CVE-2026-3613.htmlhttps://patchthecve.com/cve/CVE-2026-3613.htmlWed, 17 Jun 2026 10:43:52 +0000HIGH 7.2: A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly availahttps://patchthecve.com/cve/CVE-2026-3612.htmlhttps://patchthecve.com/cve/CVE-2026-3612.htmlWed, 17 Jun 2026 10:43:52 +0000HIGH 7.2: A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmware_url causes command injection. It is possible to initiate the attack remotely. The exploit ha