Description
A weakness has been identified in Wavlink WL-NU516U1 260227. This vulnerability affects the function ftext of the file /cgi-bin/nas.cgi. This manipulation of the argument Content-Length causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wavlink | WL-NU516U1 | 260227 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
HORKimhab/CVE-2026-4861 ★ 0 · Jul 27, 2026
CVE-2026-4861 - Draft or Todo
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- VDB-353192 | Wavlink WL-NU516U1 nas.cgi ftext stack-based overflow vdb-entry technical-description
- VDB-353192 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #776217 | Wavlink NU516U1 V260227 Stack-based Buffer Overflow third-party-advisory
- https://github.com/Wlz1112/WAVLINK-NU516U1-V260227/blob/main/Content-Length.md exploit