CVE-2026-2567 | Wavlink WL-NU516U1 20251208 /cgi-bin/nas.cgi sub_401218 User1Passwd stack-based overflow

A vulnerability identified as critical has been detected in Wavlink WL-NU516U1 20251208. This vulnerability affects the function sub_401218 of the file /cgi-bin/nas.cgi. Performing a manipulation of the argument User1Passwd results in stack-based buffer overflow.

This vulnerability was named CVE-2026-2567. The attack may be initiated remotely. In addition, an exploit is available.