CVE-2026-8228
MEDIUM
NVD
CVSS Score
6.3
Severity
MEDIUM
Published
May 10, 2026
Vendor
unknown
Description
A security vulnerability has been detected in Wavlink NU516U1 240425. Impacted is the function advance of the file /cgi-bin/wireless.cgi. Such manipulation of the argument wlan_conf/Channel/skiplist/ieee_80211h leads to os command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.