CVE-2026-13538: Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_401D68 command injection
A vulnerability was determined in Wavlink WL-NU516U1-A M16U1V240425. The affected element is the function sub401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This manipulation of the argument SSID2G2/SSID5G2/AuthMethod2/WPAPSK12 causes command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Wavlink WL-NU516U1-Ato a version that resolves this vulnerability.Fixed in M16U1_V240425 - Compensating control
Mitigate command injection via POST Parameter Handler (/cgi-bin/wireless.cgi), specifically the function sub_401D68, by blocking or restricting access to /cgi-bin/wireless.cgi at the network/WAF level until the fixed firmware version is applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13538?
CVE-2026-13538 has a medium severity rating of 6.3.
How do I fix CVE-2026-13538?
To remediate CVE-2026-13538, update the Wavlink WL-NU516U1-A device firmware to the latest version provided by the vendor.
What type of vulnerability is CVE-2026-13538?
CVE-2026-13538 is categorized as a command injection vulnerability.
What are the potential impacts of CVE-2026-13538?
The potential impacts of CVE-2026-13538 include remote code execution and unauthorized access to the affected system.
Which component is affected by CVE-2026-13538?
CVE-2026-13538 affects the POST Parameter Handler in the file /cgi-bin/wireless.cgi of the Wavlink WL-NU516U1-A.