Wavlink Wl-NU516U1-A vulnerabilities

2 CVEs affecting Wavlink Wl-NU516U1-A, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-13539, published 2026-06-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-13538, published 2026-06-29. Medium severity, CVSS 6.3. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was determined in Wavlink WL-NU516U1-A M16U1_V240425. The affected element is the function sub_401D68 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. This…
CVE-2026-13539, published 2026-06-29. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability was identified in Wavlink WL-NU516U1-A M16U1_V240425. The impacted element is the function sub_407504 of the file /cgi-bin/wireless.cgi of the component POST Parameter Handler. Such…