Log in Start free

Vulnerability · Published Aug 3, 2026 · Assigned by VulDB

CVE-2026-18607Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow

High 8.8

In plain English

A high-severity stack buffer overflow in etc. WN529 from Wavlink. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).

Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 43.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation of the argument HTTP_COOKIE leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

Affected products (as reported)

VendorProductVersions
Wavlink WN572 20260609
Wavlink WN570H 20260609
Wavlink WN573 20260609
Wavlink WN529 20260609
Wavlink WN530 20260609
Wavlink WN531 20260609
Wavlink WN535 20260609
Wavlink etc. WN529 20260609
Wavlink WN530 20260609
Wavlink WN531 20260609
Wavlink WN535 20260609
Wavlink WN536 20260609
Wavlink WN551 20260609
Wavlink WN557 20260609
Wavlink NU516 20260609

Weakness: CWE-121, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R

References