CVE-2026-8229: Wavlink NU516U1 wireless.cgi WifiBasic os command injection
A vulnerability was detected in Wavlink NU516U1 240425. The affected element is the function WifiBasic of the file /cgi-bin/wireless.cgi. Performing a manipulation of the argument AuthMethod/EncrypType results in os command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8229?
CVE-2026-8229 is classified as a critical severity vulnerability due to its ability to allow remote code execution via OS command injection.
How do I fix CVE-2026-8229?
To remediate CVE-2026-8229, update the firmware of Wavlink NU516U1 to the latest version that addresses the vulnerability.
What is the impact of CVE-2026-8229?
CVE-2026-8229 can allow attackers to execute arbitrary commands on the affected device, potentially compromising the system.
Which devices are affected by CVE-2026-8229?
CVE-2026-8229 specifically affects the Wavlink NU516U1 device with firmware version 240425.
How does CVE-2026-8229 exploit the system?
CVE-2026-8229 exploits the system by manipulating input parameters in the WifiBasic function to inject and execute operating system commands.