Config Import Function Vulnerability in Wavlink Product

CVE-2026-18587

What is CVE-2026-18587?

A security flaw has been identified in the Wavlink WL-NU516U1, particularly within the Config Import functionality. This vulnerability allows an attacker to execute commands on the operating system via a manipulation of the Password argument. Although the exploitation of this vulnerability is complex, the potential for remote exploitation necessitates urgent attention. The vendor responded promptly and released a patch to mitigate the risk. Users are advised to update their systems to the latest version to protect against potential attacks.

References