CVE-2026-4861 | Wavlink WL-NU516U1 260227 /cgi-bin/nas.cgi ftext Content-Length stack-based overflow

A vulnerability classified as critical has been found in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow.

This vulnerability is handled as CVE-2026-4861. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.