CVE-2026-2566: Wavlink WL-NU516U1 adm.cgi sub_406194 stack-based overflow
A security vulnerability has been detected in Wavlink WL-NU516U1 up to 130/260. This affects the function sub406194 of the file /cgi-bin/adm.cgi. Such manipulation of the argument firmwareurl leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2566?
CVE-2026-2566 is classified as a critical vulnerability due to the potential for remote code execution via stack-based buffer overflow.
How do I fix CVE-2026-2566?
To fix CVE-2026-2566, update the Wavlink WL-NU516U1 device to the latest firmware version that resolves this vulnerability.
What types of devices are affected by CVE-2026-2566?
CVE-2026-2566 affects Wavlink WL-NU516U1 devices running firmware versions up to 130/260.
What is the attack vector for CVE-2026-2566?
The attack vector for CVE-2026-2566 involves manipulating the firmware_url argument in the adm.cgi script.
What are the potential impacts of CVE-2026-2566?
The potential impacts of CVE-2026-2566 include unauthorized access, remote code execution, and compromise of the affected device.