PT-2026-67148 · Wavlink · Wl-Nu516U1

·

CVE-2026-18590

·

Published

2026-08-03

·

Updated

2026-08-03

CVSS v2.0

6.5

Medium

VectorAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Wavlink WL-NU516U1 708c073-mt7628
Description The Admin Password Handler component contains an OS command injection flaw that can be exploited remotely. The issue resides in the set sys adm() function within the adm.cgi file, allowing an attacker to execute arbitrary operating system commands.
Recommendations Upgrade the affected component to the fixed version released by the vendor.

Fix

OS Command Injection

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-18590

Affected Products

Wl-Nu516U1