CVE-2026-18607CWE-119CWE-121

CVE-2026-18607

High · published August 3, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609. Affected by this issue is the function strcpy of the file upload.cgi of the component lighttpd. The manipulation of the argument HTTP_COOKIE leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00792 · 55.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-121 · Stack-based Buffer Overflow
Published
2026-08-03T21:16Z
References (5)
https://github.com/0xcc12138/WAVLINK-vul · [email protected]https://vuldb.com/cve/CVE-2026-18607 · [email protected]https://vuldb.com/submit/852637 · [email protected]https://vuldb.com/vuln/385530 · [email protected]https://vuldb.com/vuln/385530/cti · [email protected]
EPSS history
Timeline
  • 03 AUG 16:45Z
    Wavlink NU516 lighttpd upload.cgi strcpy stack-based overflow
    cvelistv5