CVE-2026-3703 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument i…
High CVSS: 8.9

CVE-2026-3703

A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to out-of-bounds write. The attack may be performed from remote. The exploit has been published and may be used. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Vendor
Wavlink
Product
Wl-nu516u1 Firmware
CWE
CWE-119
Yayın Tarihi
2026-03-08 05:16:29
Güncelleme
2026-03-10 18:55:10
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-119 Wl-nu516u1 Firmware HIGH Wavlink 2026

Referanslar

https://dl.wavlink.com/firmware/RD/WINSTAR_NU516U1-WO-A-2026-02-27-2fcf6ae-mt7628-squashfs-sysupgrade.bin https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/ipaddr.md https://github.com/Wlz1112/Wavlink-NU516U1-V251208-/blob/main/ipaddr.md#exp-exploit--poc https://vuldb.com/?ctiid.349649 https://vuldb.com/?id.349649 https://vuldb.com/?submit.759226