CVE-2026-3661 in WL-NU516U1
Sumário
de MITRE • 07/03/2026
A flaw has been found in Wavlink WL-NU516U1 240425. This affects the function ota_new_upgrade of the file /cgi-bin/adm.cgi. This manipulation of the argument model causes command injection. It is possible to initiate the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.