CVE-2026-4861: Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow
A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-4861?
CVE-2026-4861 has a high severity rating due to its potential for causing stack-based buffer overflow.
How do I fix CVE-2026-4861?
To fix CVE-2026-4861, update the Wavlink WL-NU516U1 firmware to the latest version provided by Wavlink.
What are the consequences of exploiting CVE-2026-4861?
Exploitation of CVE-2026-4861 could allow an attacker to execute arbitrary code, leading to unauthorized access to the system.
Which products are affected by CVE-2026-4861?
CVE-2026-4861 affects the Wavlink WL-NU516U1 device specifically in version 260227.
How does the CVE-2026-4861 vulnerability occur?
The vulnerability occurs due to improper handling of the Content-Length argument in the nas.cgi file, leading to a stack-based buffer overflow.