CVE-2026-8189

A vulnerability was found in Wavlink NU516U1 M16U1_V240425. Affected by this vulnerability is the function wzdrepeater of the file /cgi-bin/adm.cgi. The manipulation of the argument wlan_bssid/sel_Automode/sel_EncrypTyp results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.

• CWE-77
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_2/2.mdExploit, Third Party Advisory
• https://vuldb.com/submit/800728Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362341Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362341/ctiPermissions Required, VDB Entry

Published

May 9, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-81884radare2 is a UNIX-like reverse engineering framework and com…2.5
• CVE-2026-81885radare2 is a UNIX-like reverse engineering framework and com…5.5
• CVE-2026-81886radare2 is a UNIX-like reverse engineering framework and com…5.5
• CVE-2026-81887Livewire is a full-stack framework for Laravel. From 3.0.0-b…5.1
• CVE-2026-81888@hono/oauth-providers is Authentication middleware for Hono.…5.4
• CVE-2026-81889elFinder is an open-source file manager for web, written in …8.6
• CVE-2026-81890elFinder is an open-source file manager for web, written in …5.4
• CVE-2026-81891elFinder is an open-source file manager for web, written in …8.1
• CVE-2026-81892EasyAdmin is a fast and modern admin generator for Symfony a…8.1
• CVE-2026-81893A flaw was found in gdk-pixbuf. When loading a specially cra…4.7
• CVE-2026-81894Concrete CMS 9.5.2 and below is vulnerable to stored DOM-bas…5.4
• CVE-2026-81895In Concrete CMS before 9.5.3, the Document Library block sto…7.2