CVE-2026-8191
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
May 09, 2026
Vendor
unknown
Description
A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.