CVE-2025-10963
Last modified
CVE-2025-10963 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. EPSS estimates a 6.81% chance of exploitation in the next 30 days.
Description
A security flaw has been discovered in Wavlink NU516U1 M16U1_V240425. Affected is the function sub_4016F0 of the file /cgi-bin/firewall.cgi. The manipulation of the argument del_flag results in command injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Wavlink | Wl-Nu516u1 Firmware | m16u1_v240425 |
References
- https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.mdExploit, Third Party Advisory
- https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/singlePortForwardDelete.md#pocExploit, Third Party Advisory
- https://vuldb.com/?ctiid.325831Permissions Required, VDB Entry
- https://vuldb.com/?id.325831Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.652784Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-10963?
How severe is CVE-2025-10963?
How do I fix CVE-2025-10963?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-10958A flaw has been found in Wavlink NU516U1 M16U1_V240425. Impa…8.8
- CVE-2025-10959A vulnerability has been found in Wavlink NU516U1 M16U1_V240…8.8
- CVE-2025-1096Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2025-10960A vulnerability was found in Wavlink NU516U1 M16U1_V240425. …8.8
- CVE-2025-10961A vulnerability was determined in Wavlink NU516U1 M16U1_V240…8
- CVE-2025-10962A vulnerability was identified in Wavlink NU516U1 M16U1_V240…8.8
- CVE-2025-10964A weakness has been identified in Wavlink NU516U1. Affected …8.8
- CVE-2025-10965A security vulnerability has been detected in LazyAGI LazyLL…6.3
- CVE-2025-10966curl's code for managing SSH connections when SFTP was done …4.3
- CVE-2025-10967A vulnerability was detected in MuFen-mker PHP-Usermm up to …7.3
- CVE-2025-10968Improper Neutralization of Special Elements used in an SQL C…8.8
- CVE-2025-10969Improper Neutralization of Special Elements used in an SQL C…9.8
Are you affected by CVE-2025-10963?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST