CVE-2026-2567

7.2

Wavlink · WL-NU516U1

A security vulnerability has been identified in the Wavlink WL-NU516U1 firmware version 20251208, posing a risk to device integrity.

Executive summary

The Wavlink WL-NU516U1 device running firmware version 20251208 contains a high-severity vulnerability that could allow attackers to compromise the device.

Vulnerability

This flaw specifically affects the 20251208 build of the Wavlink WL-NU516U1 firmware. With a CVSS score of 7.2, the vulnerability likely allows for unauthorized administrative actions or information disclosure through the device's management protocols.

Business impact

A successful exploit could allow an attacker to gain control over the network device, leading to potential data breaches or denial-of-service conditions. This high-severity risk necessitates immediate action to maintain the security of the network perimeter and internal segments where these devices reside.

Remediation

Immediate Action: Update the firmware to the newest available secure version beyond 20251208 immediately.

Proactive Monitoring: Review administrative logs for any login attempts from unknown IP addresses and monitor for unusual traffic patterns originating from the device.

Compensating Controls: Implement strong password policies for device management and use network segmentation to isolate the device from critical assets.

Exploitation status

Public Exploit Available: false

Analyst recommendation

The 7.2 CVSS score highlights a significant security gap. It is recommended that administrators replace or update the firmware on all affected Wavlink devices to prevent unauthorized access and potential lateral movement within the network.

More Wavlink CVEs