---
id: CVE-2025-10964
title: A weakness has been identified in Wavlink NU516U1
summary: >-
  A weakness has been identified in Wavlink NU516U1. Affected by this
  vulnerability is the function sub_401B30 of the file /cgi-bin/firewall.cgi.
  This manipulation of the argument remoteManagementEnabled causes command
  injection. The attac…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-74
  - CWE-77
vendor: wavlink
product: wl-nu516u1_firmware
affected:
  - wl-nu516u1_firmware = m16u1_v240425
published: '2025-09-25'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T20:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-10964'
references:
  - url: >-
      https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md
    label: cna@vuldb.com
  - url: >-
      https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md#poc
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?ctiid.325832'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?id.325832'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/?submit.652785'
    label: cna@vuldb.com
  - url: >-
      https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/websSysFirewall.md#poc
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.06807
epssPercentile: 0.93864
ingestedAt: '2026-10-12T14:50:33.997Z'
---

## Overview

A weakness has been identified in Wavlink NU516U1. Affected by this vulnerability is the function sub_401B30 of the file /cgi-bin/firewall.cgi. This manipulation of the argument remoteManagementEnabled causes command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

## Affected

- `wl-nu516u1_firmware = m16u1_v240425`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.