https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T06:35:20.106566+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-34836 cnvd-2026-34836 2026-10-12T06:35:20.109043+00:00 cnvd-2026-34836 https://cve.radiocsirt.org/vuln/euvd-2026-309974 EUVD-2026-309974 2026-10-12T06:35:20.109069+00:00 EUVD-2026-309974 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8190 fkie_cve-2026-8190 2026-10-12T06:35:20.109083+00:00

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway is directly passed by the attacker/so we can control the ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.

 https://cve.radiocsirt.org/vuln/ghsa-hm76-m6wf-p499 GHSA-hm76-m6wf-p499 2026-10-12T06:35:20.109109+00:00

A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. Affected by this issue is the function wan of the file /cgi-bin/adm.cgi. This manipulation of the argument ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway is directly passed by the attacker/so we can control the ppp_username/ppp_passwd/rwan_ip/rwan_mask/rwan_gateway causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.