Is CVE-2026-15513 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-15513 being exploited in the wild.

How severe is CVE-2026-15513?

Medium severity, with a CVSS score of 6.3, published 13 July 2026.

Is there a fix for CVE-2026-15513?

A patch was published on 2026-06-22: Vendor released fixed firmware version Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-15513 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2026-15513?

Check whether you run Wavlink Wl-Nu516u1 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-15513: Wavlink WL-NU516U1 OS command injection in adm.cgi

CVE-2026-15513 · Severity: medium · CVSS 6.3 · Published 2026-07-13

A security vulnerability has been identified in the Wavlink WL-NU516U1 router, a device used to provide wireless internet connectivity. An attacker could exploit this flaw to take control of the router's operating system, potentially leading to unauthorized access to network traffic or a complete service outage. A fixed version of the firmware has been released by the manufacturer to address this issue.

Technologies: Wavlink Wl-Nu516u1. Vendors: Wavlink.

Quick answers

Is CVE-2026-15513 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-15513 being exploited in the wild.
How severe is CVE-2026-15513?: Medium severity, with a CVSS score of 6.3, published 13 July 2026.
Which products and versions are affected?: Wavlink Wl-Nu516u1 260515.
Is there a fix for CVE-2026-15513?: A patch was published on 2026-06-22: Vendor released fixed firmware version Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-15513 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2026-15513?: Check whether you run Wavlink Wl-Nu516u1 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability exists in the Wavlink WL-NU516U1 router firmware version 260515. The flaw is located within the 'wlink_uci_set_value' function in '/cgi-bin/adm.cgi' due to improper neutralization of the 'lan_ip' argument before it is passed to a system call. A remote attacker with low privileges can exploit this by sending a specially crafted request to execute arbitrary commands on the underlying Linux operating system. Public exploit code exists, and the vulnerability can reportedly be chained with CSRF to bypass authentication. A firmware update (WINSTAR_NU516U1-WO-A-2026-06-22) is available to remediate the issue.

Affected products

Wavlink WL-NU516U1 260515

Timeline

2026-07-13: advisory: NVD publication date
2026-06-22: patched: Vendor released fixed firmware version

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.