CVE-2026-8229

A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

• CWE-77
• CWE-78
• CWE-78

• https://github.com/wudipjq/my_vuln/blob/main/Wavlink/vuln_8/8.mdExploit, Third Party Advisory
• https://vuldb.com/submit/800734Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362446Third Party Advisory, VDB Entry
• https://vuldb.com/vuln/362446/ctiPermissions Required, VDB Entry

Published

May 10, 2026

Last Modified

Jul 24, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82284Quivr versions through 0.0.322 fail to validate chat ownersh…8.1
• CVE-2026-82285bisheng through 2.6.0-fix2 contains a server-side request fo…8.2
• CVE-2026-82286gpt-crawler through 1.5.1 fails to validate the outputFileNa…8.6
• CVE-2026-82287Rybbit before 2.7.0 contains a CORS misconfiguration vulnera…8.1
• CVE-2026-82288Stable Diffusion WebUI through 1.10.1 contains a credential …7.5
• CVE-2026-82289Gitingest through 0.3.1 fails to properly validate hostnames…7.4
• CVE-2026-82290Chainlit through 2.12.0 fails to validate ownership of feedb…5.3
• CVE-2026-82291HeyForm before 3.0.0-rc.8 reflects the request Origin header…8.1
• CVE-2026-82293Incorrect Authorization (CWE-863) in the Kibana machine lear…4.3
• CVE-2026-82294Uncontrolled Resource Consumption (CWE-400) in Elasticsearch…6.5
• CVE-2026-82298Incorrect Authorization (CWE-863) in Kibana can lead to deni…4.3
• CVE-2026-82299Incorrect Authorization (CWE-863) in Kibana can lead to info…6.5