ByteOS Network

NVD Vulnerability Details :

CVE-2026-8191

Undergoing Analysis

Source-cna@vuldb.com

Published At-09 May, 2026 | 19:16

Updated At-11 May, 2026 | 15:07

A vulnerability was identified in Wavlink NU516U1 M16U1_V240425. This affects the function wifi_region of the file /cgi-bin/adm.cgi. Such manipulation of the argument skiplist1/skiplist2 leads to os command injection. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	2.1	LOW	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

Type: Secondary

Version: 4.0

Base score: 2.1

Base severity: LOW

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Type: Secondary

Version: 2.0

Base score: 6.5

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P

Weaknesses

CWE ID	Type	Source
CWE-77	Primary	cna@vuldb.com
CWE-78	Primary	cna@vuldb.com

CWE ID: CWE-77

Type: Primary

Source: cna@vuldb.com

CWE ID: CWE-78

Type: Primary

Source: cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_4/4.md	cna@vuldb.com	N/A
https://vuldb.com/submit/800730	cna@vuldb.com	N/A
https://vuldb.com/vuln/362343	cna@vuldb.com	N/A
https://vuldb.com/vuln/362343/cti	cna@vuldb.com	N/A