Is CVE-2026-8191 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8191 being exploited in the wild.

How severe is CVE-2026-8191?

Medium severity, with a CVSS score of 6.3, published 9 May 2026.

Which products and versions are affected?

Wavlink NU516U1 M16U1_V240425; Wavlink NU516U1 USB Network Printer Server M16U1_V240425.

Is there a fix for CVE-2026-8191?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-8191 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-8191?

Check whether you run Wavlink NU516U1, Wavlink NU516U1 USB Network Printer Server, Wavlink Wl-Nu516u1 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8191: Wavlink NU516U1 command injection in adm.cgi

CVE-2026-8191 · Severity: medium · CVSS 6.3 · Published 2026-05-09

A vulnerability exists in the Wavlink NU516U1 USB Network Printer Server, a device used to share printers across a network. An attacker can exploit this flaw to take complete control of the device by executing unauthorized system commands. This could lead to the device being used as a foothold for further attacks on the internal network or a total loss of the device's functionality.

Technologies: Wavlink NU516U1, Wavlink Wl-Nu516u1, Wavlink Wl-Nu516u1 Firmware. Vendors: Wavlink.

Quick answers

Is CVE-2026-8191 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8191 being exploited in the wild.
How severe is CVE-2026-8191?: Medium severity, with a CVSS score of 6.3, published 9 May 2026.
Which products and versions are affected?: Wavlink NU516U1 M16U1_V240425; Wavlink NU516U1 USB Network Printer Server M16U1_V240425.
Is there a fix for CVE-2026-8191?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-8191 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-8191?: Check whether you run Wavlink NU516U1, Wavlink NU516U1 USB Network Printer Server, Wavlink Wl-Nu516u1 or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An OS command injection vulnerability exists in the Wavlink NU516U1 USB Network Printer Server (firmware version M16U1_V240425). The flaw is located within the 'wifi_region' function in the '/cgi-bin/adm.cgi' component. The application fails to properly sanitize the 'skiplist1' and 'skiplist2' arguments before passing them to a system shell. A remote attacker with low-level authenticated access can exploit this by sending a specially crafted POST request containing shell metacharacters (e.g., backticks) to execute arbitrary commands with the privileges of the web server. A public Proof-of-Concept (PoC) demonstrating the ability to start a telnet daemon for remote shell access is available.

Affected products

Wavlink NU516U1 USB Network Printer Server M16U1_V240425

Timeline

2026-05-09: disclosed: Initial disclosure and VulDB entry creation
2026-05-09: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.