CVE-2026-2567: Wavlink WL-NU516U1 nas.cgi sub_401218 stack-based overflow
A vulnerability was detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2567?
CVE-2026-2567 is considered a high-severity vulnerability due to its potential for remote exploitation and stack-based buffer overflow.
How do I fix CVE-2026-2567?
To fix CVE-2026-2567, update the firmware of the Wavlink WL-NU516U1 to the latest version provided by the manufacturer.
What is the impact of CVE-2026-2567?
The impact of CVE-2026-2567 includes the possibility of arbitrary code execution on the affected device due to the stack-based buffer overflow.
Can CVE-2026-2567 be exploited remotely?
Yes, CVE-2026-2567 can be exploited remotely by manipulating the User1Passwd argument.
Which devices are affected by CVE-2026-2567?
CVE-2026-2567 specifically affects the Wavlink WL-NU516U1 model.