CVE-2026-13539

HIGH 8.8

Wavlink WL-NU516U1-A POST Parameter wireless.cgi sub_407504 stack-based overflow

CVSS Score

8.8

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the function sub_407504 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. Such manipulation of the argument Guest_ssid leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be used. It is suggested to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CWE	CWE-121 CWE-119
Vendor	wavlink
Product	wl-nu516u1-a
Published	Jun 29, 2026

Stay Ahead of the Next One

Get instant alerts for wavlink wl-nu516u1-a

Be the first to know when new high vulnerabilities affecting wavlink wl-nu516u1-a are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Wavlink / WL-NU516U1-A

M16U1_V240425

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/374547 vuldb.com: https://vuldb.com/vuln/374547/cti vuldb.com: https://vuldb.com/cve/CVE-2026-13539 vuldb.com: https://vuldb.com/submit/834024 github.com: https://github.com/Svigo-o/Wavlink_vul/tree/main/wavlink-wl-nu516u1-wireless-guestwifi-guestssid-buffer-overflow dl.wavlink.com: https://dl.wavlink.com/firmware/RD/WINSTAR_NU516U1-WO-A-2026-06-22-5ccde97-mt7628-squashfs-sysupgrade.bin

Credits

🔍 JuneGu (VulDB User) VulDB CNA Team