cveboard RSS feed

CVE-2026-18607

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2026
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation of the argument HTTP_COOKIE leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

WN572

Vendor
Wavlink
Product
WN572
Platforms
Unknown
Default status
Unknown
WN572 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN570H

Vendor
Wavlink
Product
WN570H
Platforms
Unknown
Default status
Unknown
WN570H · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN573

Vendor
Wavlink
Product
WN573
Platforms
Unknown
Default status
Unknown
WN573 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN529

Vendor
Wavlink
Product
WN529
Platforms
Unknown
Default status
Unknown
WN529 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN530

Vendor
Wavlink
Product
WN530
Platforms
Unknown
Default status
Unknown
WN530 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN531

Vendor
Wavlink
Product
WN531
Platforms
Unknown
Default status
Unknown
WN531 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN535

Vendor
Wavlink
Product
WN535
Platforms
Unknown
Default status
Unknown
WN535 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

etc. WN529

Vendor
Wavlink
Product
etc. WN529
Platforms
Unknown
Default status
Unknown
etc. WN529 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN530

Vendor
Wavlink
Product
WN530
Platforms
Unknown
Default status
Unknown
WN530 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN531

Vendor
Wavlink
Product
WN531
Platforms
Unknown
Default status
Unknown
WN531 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN535

Vendor
Wavlink
Product
WN535
Platforms
Unknown
Default status
Unknown
WN535 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN536

Vendor
Wavlink
Product
WN536
Platforms
Unknown
Default status
Unknown
WN536 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN551

Vendor
Wavlink
Product
WN551
Platforms
Unknown
Default status
Unknown
WN551 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

WN557

Vendor
Wavlink
Product
WN557
Platforms
Unknown
Default status
Unknown
WN557 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed

NU516

Vendor
Wavlink
Product
NU516
Platforms
Unknown
Default status
Unknown
NU516 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
20260609affectedUnavailableUnavailableUnavailableNone listed