CVE-2026-18587

Wavlink WL-NU516U1 Config Import os command injection

State: Published
Severity: 7.7 High
Published: Aug 3, 2026
Updated: Aug 3, 2026
Reserved: Aug 2, 2026

Description

A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacted element is an unknown function of the component Config Import. Executing a manipulation of the argument Password can lead to os command injection. The attack may be launched remotely. This attack is characterized by high complexity. The exploitability is regarded as difficult. The exploit has been published and may be used. It is advisable to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Scores

CVSS	Score	Vector	Source
4.0	7.7 High	CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P	VulDB
3.1	7.5 High	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C	VulDB
3.0	7.5 High	CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C	VulDB
2.0	7.6 High	AV:N/AC:H/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C	VulDB

Weaknesses

CWE-78 OS Command Injection
CWE-77 Command Injection

Affected Products

Product	Versions
WL-NU516U1Wavlink	708c073-mt7628Affected

References

VDB-385415 | Wavlink WL-NU516U1 Config Import os command injectionvdb-entrytechnical-description
VDB-385415 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
CVE-2026-18587 | CVE Analysis and Reportthird-party-advisory
Submit #850494 | WAVLINK WL-NU516U1 2026-05-15 (build 708c073-mt7628) Command Injectionthird-party-advisory
https://github.com/oduoke567/WAVLINK-NU516U1-2026-05-1/blob/main/report.mdbroken-link
https://dl.wavlink.com/firmware/RD/WINSTAR_NU516U1-WO-A-2026-07-13-4b8a21f-mt7628-squashfs-sysupgrade.binbroken-linkpatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.