https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T12:15:34.497242+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-3612 CVE-2026-3612 — Wavlink WL-NU516U1 OTA Online Upgrade adm.cgi sub_405AF4 command injection 2026-09-30T12:15:35.685462+00:00

Affected: Wavlink WL-NU516U1

A vulnerability was determined in Wavlink WL-NU516U1 V240425. This affects the function sub_405AF4 of the file /cgi-bin/adm.cgi of the component OTA Online Upgrade. This manipulation of the argument firmware_url causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.