CVE-2026-2567

Wavlink · WL-NU516U1

A security vulnerability has been identified in the Wavlink WL-NU516U1 firmware version 20251208, posing a risk to device integrity.

Executive summary

The Wavlink WL-NU516U1 device running firmware version 20251208 contains a high-severity vulnerability that could allow attackers to compromise the device.

Vulnerability

This flaw specifically affects the 20251208 build of the Wavlink WL-NU516U1 firmware. With a CVSS score of 7.2, the vulnerability likely allows for unauthorized administrative actions or information disclosure through the device's management protocols.

Business impact

A successful exploit could allow an attacker to gain control over the network device, leading to potential data breaches or denial-of-service conditions. This high-severity risk necessitates immediate action to maintain the security of the network perimeter and internal segments where these devices reside.

Remediation

Immediate Action: Update the firmware to the newest available secure version beyond 20251208 immediately.

Proactive Monitoring: Review administrative logs for any login attempts from unknown IP addresses and monitor for unusual traffic patterns originating from the device.

Compensating Controls: Implement strong password policies for device management and use network segmentation to isolate the device from critical assets.

Exploitation status

Public Exploit Available: false

Analyst recommendation

The 7.2 CVSS score highlights a significant security gap. It is recommended that administrators replace or update the firmware on all affected Wavlink devices to prevent unauthorized access and potential lateral movement within the network.