What’s Vulnerable › Products

Wavlink NU516U1 vulnerabilities

35 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 35 published in the last 12 months.

Check whether your Wavlink NU516U1 version is affected

Latest Wavlink NU516U1 vulnerabilities

• CVE-2026-18590 — Wavlink WL-NU516U1 Admin Password adm.cgi set_sys_adm os command injection (CVSS 6.3)
• CVE-2026-18589 — Wavlink WL-NU516U1 nas.cgi change_password stack-based overflow (CVSS 9.8)
• CVE-2026-18588 — Wavlink WL-NU516U1 nas.cgi fgets stack-based overflow (CVSS 9.8)
• CVE-2026-18587 — Wavlink WL-NU516U1 Config Import os command injection (CVSS 7.5)
• CVE-2026-15513 — Wavlink WL-NU516U1 adm.cgi wlink_uci_set_value os command injection (CVSS 6.3)
• CVE-2026-8230 — Wavlink NU516U1 login.cgi sys_login1 os command injection (CVSS 8.8)
• CVE-2026-8229 — Wavlink NU516U1 wireless.cgi WifiBasic os command injection (CVSS 8.8)
• CVE-2026-8228 — Wavlink NU516U1 wireless.cgi advance os command injection (CVSS 8.8)
• CVE-2026-8227 — Wavlink NU516U1 adm.cgi wzdapMesh os command injection (CVSS 8.8)
• CVE-2026-8192 — Wavlink NU516U1 adm.cgi wzdap os command injection (CVSS 8.8)
• CVE-2026-8191 — Wavlink NU516U1 adm.cgi wifi_region os command injection (CVSS 8.8)
• CVE-2026-8190 — Wavlink NU516U1 adm.cgi wan os command injection (CVSS 8.8)
• CVE-2026-8189 — Wavlink NU516U1 adm.cgi wzdrepeater os command injection (CVSS 8.8)
• CVE-2026-8188 — Wavlink NU516U1 adm.cgi change_wifi_password os command injection (CVSS 8.8)
• CVE-2026-4861 — Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow (CVSS 8.8)
• CVE-2026-4166 — Wavlink WL-NU516U1 login.cgi sub_404F68 cross site scripting (CVSS 3.5)
• CVE-2026-3703 — Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write (CVSS 9.8)
• CVE-2026-3704 — Wavlink NU516U1 Incomplete Fix CVE-2025-10959 firewall.cgi sub_405B2C command injection (CVSS 7.2)
• CVE-2026-3662 — Wavlink WL-NU516U1 adm.cgi usb_p910 command injection (CVSS 7.2)
• CVE-2026-3661 — Wavlink WL-NU516U1 adm.cgi ota_new_upgrade command injection (CVSS 7.2)
• CVE-2026-3613 — Wavlink WL-NU516U1 login.cgi sub_401A0C stack-based overflow (CVSS 7.2)
• CVE-2026-3612 — Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection (CVSS 7.2)
• CVE-2026-2615 — Wavlink WL-NU516U1 firewall.cgi singlePortForwardDelete command injection (CVSS 7.2)
• CVE-2026-2567 — Wavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflow (CVSS 7.2)
• CVE-2026-2566 — Wavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflow (CVSS 7.2)