CVE-2026-3613

HIGH

Wavlink WL-NU516U1 V240425 - Buffer Overflow

Title source: llm

Description

A vulnerability was identified in Wavlink WL-NU516U1 V240425. This vulnerability affects the function sub_401A0C of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure.

Scores

CVSS v3 7.2
EPSS 0.0004
EPSS Percentile 11.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-119 CWE-121
Status draft

Timeline

Published Mar 06, 2026
Tracked Since Mar 06, 2026