CVE-2025-10959: Wavlink NU516U1 firewall.cgi sub_401778 command injection

Published Sep 25, 2025

Updated

A vulnerability has been found in Wavlink NU516U1 M16U1V240425. The affected element is the function sub401778 of the file /cgi-bin/firewall.cgi. Such manipulation of the argument dmzflag leads to command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

2 affected components

Wavlink NU516U1

Wavlink WL-NU516U1

Event History

Sep 25, 2025

CVE Published

via MITRE·05:32 PM

Data Sourced

via MITRE·05:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-10959?

CVE-2025-10959 is classified as a high-severity command injection vulnerability.

How do I fix CVE-2025-10959?

To fix CVE-2025-10959, update the Wavlink NU516U1 firmware to the latest version that addresses this vulnerability.

What type of attack is possible with CVE-2025-10959?

CVE-2025-10959 enables remote attackers to exploit command injection vulnerabilities.

Which component is affected by CVE-2025-10959?

CVE-2025-10959 affects the function sub_401778 in the /cgi-bin/firewall.cgi file.

Who is affected by CVE-2025-10959?

Users of the Wavlink NU516U1 device are at risk due to CVE-2025-10959.