High severity · published Sep 25, 2025
CVE-2025-10961
Wavlink NU516U1 Delete_Mac_list wireless.cgi sub_4030C0 command injection
8.0
CVSS
8.1%
EPSS
No
On KEV
Description
A vulnerability was determined in Wavlink NU516U1 M16U1_V240425. This affects the function sub_4030C0 of the file /cgi-bin/wireless.cgi of the component Delete_Mac_list Page. Executing manipulation of the argument delete_list can lead to command injection. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)8.1% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NU
NU516U1 · Wavlink
M16U1_V240425 · source: vendor
WF
Wl-nu516u1 Firmware · Wavlink
m16u1_v240425 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-10961
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-10961
Exploit
https://github.com/panda666-888/vuls/blob/main/wavlink/nu516u1/Delete_Mac_list.md
Permissions Required
https://vuldb.com/?ctiid.325829
Third Party Advisory
https://vuldb.com/?id.325829
Third Party Advisory
https://vuldb.com/?submit.652781
More from NU516U1
9.8
CVE-2026-3703
Wavlink NU516U1 login.cgi sub_401A10 out-of-bounds write
8.8
CVE-2026-8230
Wavlink NU516U1 login.cgi sys_login1 os command injection
8.8
CVE-2026-8229
Wavlink NU516U1 wireless.cgi WifiBasic os command injection
8.8
CVE-2026-8228
Wavlink NU516U1 wireless.cgi advance os command injection
8.8
CVE-2026-8227
Wavlink NU516U1 adm.cgi wzdapMesh os command injection