PoC Index85,092 CVEs with PoCs

CVE-2026-3703

Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write

HIGH 8.9EPSS 1.3%

A flaw has been found in Wavlink NU516U1 251208. This affects the function sub_401A10 of the file /cgi-bin/login.cgi. Executing a manipulation of the argument ipaddr can lead to out-of-bounds write. The attack may be performed from remote. The exploit has been published and may be used. Upgrading the affected component is recommended. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Affected
Wavlink · NU516U1
CVSS v4.0 VULDB
8.9 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS v3.1 VULDB
9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 VULDB
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
1.26% chance of exploitation in the next 30 days, 69th percentile
Published
2026-03-08
Updated
2026-03-10

Proof-of-concept exploits (1)

Security advisories

References

Related