CVE-2025-10775 | Wavlink WL-NU516U1 240425 /cgi-bin/login.cgi sub_4012A0 ipaddr os command injection

A vulnerability categorized as critical has been discovered in Wavlink WL-NU516U1 240425. This vulnerability affects the function sub_4012A0 of the file /cgi-bin/login.cgi. Such manipulation of the argument ipaddr leads to os command injection.

This vulnerability is referenced as CVE-2025-10775. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure but did not respond in any way.