Search
Find a vulnerability
Search criteria
14 vulnerabilities found for WN536AX6-A by WAVLINK
CVE-2026-120282 (GCVE-0-2026-120282)
Vulnerability from nvd – Published: 2026-11-02 00:45 – Updated: 2026-11-02 00:45
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A protocol.csp host_black os command injection
Summary
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Severity
9.9 (Critical)
9.9 (Critical)
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429626 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429626/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120282 | third-party-advisory |
| https://vuldb.com/submit/919791 | third-party-advisory |
| https://github.com/pipiyyb/cve/blob/main/WAVLINK%… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "hackerpipi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 9,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:45:25.930Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429626 | WAVLINK WN536AX6-A protocol.csp host_black os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429626"
},
{
"name": "VDB-429626 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429626/cti"
},
{
"name": "CVE-2026-120282 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120282"
},
{
"name": "Submit #919791 | WAVLINK WN536AX6 V260507 CWE-78",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919791"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_mac.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:52.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A protocol.csp host_black os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120282",
"datePublished": "2026-11-02T00:45:25.930Z",
"dateReserved": "2026-11-01T07:44:20.559Z",
"dateUpdated": "2026-11-02T00:45:25.930Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120281 (GCVE-0-2026-120281)
Vulnerability from nvd – Published: 2026-11-02 00:30 – Updated: 2026-11-02 00:30
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow
Summary
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429625 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429625/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120281 | third-party-advisory |
| https://vuldb.com/submit/919790 | third-party-advisory |
| https://github.com/F-yyjy/cve/blob/main/WN536AX6-… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"OpenVPN Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "yyjy (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:30:18.106Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429625 | WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429625"
},
{
"name": "VDB-429625 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429625/cti"
},
{
"name": "CVE-2026-120281 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120281"
},
{
"name": "Submit #919790 | Wavlink WN536AX6 V260507 CWE-121",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919790"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T14:27:42.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120281",
"datePublished": "2026-11-02T00:30:18.106Z",
"dateReserved": "2026-11-01T07:44:16.932Z",
"dateUpdated": "2026-11-02T00:30:18.106Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120280 (GCVE-0-2026-120280)
Vulnerability from nvd – Published: 2026-11-02 00:15 – Updated: 2026-11-02 00:15
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection
Summary
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429624 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429624/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120280 | third-party-advisory |
| https://vuldb.com/submit/919789 | third-party-advisory |
| https://github.com/pipiyyb/cve/blob/main/WAVLINK%… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"WireGuard"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "hackerpipi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:15:22.183Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429624 | WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429624"
},
{
"name": "VDB-429624 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429624/cti"
},
{
"name": "CVE-2026-120280 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120280"
},
{
"name": "Submit #919789 | WAVLINK WN536AX6 V260507 CWE-78",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919789"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_group_id.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:44.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120280",
"datePublished": "2026-11-02T00:15:22.183Z",
"dateReserved": "2026-11-01T07:44:13.312Z",
"dateUpdated": "2026-11-02T00:15:22.183Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120279 (GCVE-0-2026-120279)
Vulnerability from nvd – Published: 2026-11-02 00:00 – Updated: 2026-11-02 00:00
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection
Summary
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429623 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429623/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120279 | third-party-advisory |
| https://vuldb.com/submit/919788 | third-party-advisory |
| https://github.com/pipiyyb/cve/blob/main/WAVLINK%… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"openvpn_cli Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "hackerpipi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:00:18.775Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429623 | WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429623"
},
{
"name": "VDB-429623 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429623/cti"
},
{
"name": "CVE-2026-120279 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120279"
},
{
"name": "Submit #919788 | WAVLINK WN536AX6 V260507 CWE-78",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919788"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_file_id.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:40.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120279",
"datePublished": "2026-11-02T00:00:18.775Z",
"dateReserved": "2026-11-01T07:44:09.701Z",
"dateUpdated": "2026-11-02T00:00:18.775Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120278 (GCVE-0-2026-120278)
Vulnerability from nvd – Published: 2026-11-01 23:45 – Updated: 2026-11-01 23:45
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication
Summary
A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429622 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429622/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120278 | third-party-advisory |
| https://vuldb.com/submit/919506 | third-party-advisory |
| https://github.com/senxitoyshuyi-ui/HACKALL/blob/… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507_2.0.0
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"VPN Client List Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507_2.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shuyi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-01T23:45:16.567Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429622 | WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429622"
},
{
"name": "VDB-429622 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429622/cti"
},
{
"name": "CVE-2026-120278 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120278"
},
{
"name": "Submit #919506 | Wavlink Router Firmware V260507_2.0.0 Exposure of Sensitive Information",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919506"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_vpn_list_info_disclosure.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:36.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120278",
"datePublished": "2026-11-01T23:45:16.567Z",
"dateReserved": "2026-11-01T07:44:05.887Z",
"dateUpdated": "2026-11-01T23:45:16.567Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120277 (GCVE-0-2026-120277)
Vulnerability from nvd – Published: 2026-11-01 23:30 – Updated: 2026-11-01 23:30
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
Summary
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429621 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429621/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120277 | third-party-advisory |
| https://vuldb.com/submit/919503 | third-party-advisory |
| https://github.com/senxitoyshuyi-ui/HACKALL/blob/… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507_2.0.0
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"WireGuard CLI Group Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507_2.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shuyi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-01T23:30:19.046Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429621 | WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429621"
},
{
"name": "VDB-429621 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429621/cti"
},
{
"name": "CVE-2026-120277 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120277"
},
{
"name": "Submit #919503 | Wavlink Router Firmware V260507_2.0.0 OS Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919503"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_wireguard_cli_group_command_injection.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120277",
"datePublished": "2026-11-01T23:30:19.046Z",
"dateReserved": "2026-11-01T07:44:01.879Z",
"dateUpdated": "2026-11-01T23:30:19.046Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120276 (GCVE-0-2026-120276)
Vulnerability from nvd – Published: 2026-11-01 23:15 – Updated: 2026-11-01 23:15
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
Summary
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429620 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429620/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120276 | third-party-advisory |
| https://vuldb.com/submit/919502 | third-party-advisory |
| https://github.com/senxitoyshuyi-ui/HACKALL/blob/… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507_2.0.0
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"Web Management Interface"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507_2.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shuyi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-01T23:15:12.335Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429620 | WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429620"
},
{
"name": "VDB-429620 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429620/cti"
},
{
"name": "CVE-2026-120276 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120276"
},
{
"name": "Submit #919502 | Wavlink Router Firmware V260507_2.0.0 OS Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919502"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_openvpn_cli_group_command_injection.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:27.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120276",
"datePublished": "2026-11-01T23:15:12.335Z",
"dateReserved": "2026-11-01T07:43:56.426Z",
"dateUpdated": "2026-11-01T23:15:12.335Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120282 (GCVE-0-2026-120282)
Vulnerability from cvelistv5 – Published: 2026-11-02 00:45 – Updated: 2026-11-02 00:45
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A protocol.csp host_black os command injection
Summary
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Severity
9.9 (Critical)
9.9 (Critical)
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429626 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429626/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120282 | third-party-advisory |
| https://vuldb.com/submit/919791 | third-party-advisory |
| https://github.com/pipiyyb/cve/blob/main/WAVLINK%… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "hackerpipi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.4,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 9.9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 9,
"vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:45:25.930Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429626 | WAVLINK WN536AX6-A protocol.csp host_black os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429626"
},
{
"name": "VDB-429626 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429626/cti"
},
{
"name": "CVE-2026-120282 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120282"
},
{
"name": "Submit #919791 | WAVLINK WN536AX6 V260507 CWE-78",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919791"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_mac.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:52.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A protocol.csp host_black os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120282",
"datePublished": "2026-11-02T00:45:25.930Z",
"dateReserved": "2026-11-01T07:44:20.559Z",
"dateUpdated": "2026-11-02T00:45:25.930Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120281 (GCVE-0-2026-120281)
Vulnerability from cvelistv5 – Published: 2026-11-02 00:30 – Updated: 2026-11-02 00:30
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow
Summary
A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429625 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429625/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120281 | third-party-advisory |
| https://vuldb.com/submit/919790 | third-party-advisory |
| https://github.com/F-yyjy/cve/blob/main/WN536AX6-… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"OpenVPN Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "yyjy (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of the component OpenVPN Handler. The manipulation of the argument openvpn_ip results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:30:18.106Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429625 | WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429625"
},
{
"name": "VDB-429625 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429625/cti"
},
{
"name": "CVE-2026-120281 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120281"
},
{
"name": "Submit #919790 | Wavlink WN536AX6 V260507 CWE-121",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919790"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/F-yyjy/cve/blob/main/WN536AX6-A_openvpn_ip.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T14:27:42.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflow",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120281",
"datePublished": "2026-11-02T00:30:18.106Z",
"dateReserved": "2026-11-01T07:44:16.932Z",
"dateUpdated": "2026-11-02T00:30:18.106Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120280 (GCVE-0-2026-120280)
Vulnerability from cvelistv5 – Published: 2026-11-02 00:15 – Updated: 2026-11-02 00:15
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection
Summary
A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429624 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429624/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120280 | third-party-advisory |
| https://vuldb.com/submit/919789 | third-party-advisory |
| https://github.com/pipiyyb/cve/blob/main/WAVLINK%… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"WireGuard"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "hackerpipi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:15:22.183Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429624 | WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429624"
},
{
"name": "VDB-429624 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429624/cti"
},
{
"name": "CVE-2026-120280 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120280"
},
{
"name": "Submit #919789 | WAVLINK WN536AX6 V260507 CWE-78",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919789"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_group_id.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:44.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120280",
"datePublished": "2026-11-02T00:15:22.183Z",
"dateReserved": "2026-11-01T07:44:13.312Z",
"dateUpdated": "2026-11-02T00:15:22.183Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120279 (GCVE-0-2026-120279)
Vulnerability from cvelistv5 – Published: 2026-11-02 00:00 – Updated: 2026-11-02 00:00
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection
Summary
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429623 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429623/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120279 | third-party-advisory |
| https://vuldb.com/submit/919788 | third-party-advisory |
| https://github.com/pipiyyb/cve/blob/main/WAVLINK%… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"openvpn_cli Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "hackerpipi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T00:00:18.775Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429623 | WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429623"
},
{
"name": "VDB-429623 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429623/cti"
},
{
"name": "CVE-2026-120279 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120279"
},
{
"name": "Submit #919788 | WAVLINK WN536AX6 V260507 CWE-78",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919788"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_file_id.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:40.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120279",
"datePublished": "2026-11-02T00:00:18.775Z",
"dateReserved": "2026-11-01T07:44:09.701Z",
"dateUpdated": "2026-11-02T00:00:18.775Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120278 (GCVE-0-2026-120278)
Vulnerability from cvelistv5 – Published: 2026-11-01 23:45 – Updated: 2026-11-01 23:45
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication
Summary
A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429622 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429622/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120278 | third-party-advisory |
| https://vuldb.com/submit/919506 | third-party-advisory |
| https://github.com/senxitoyshuyi-ui/HACKALL/blob/… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507_2.0.0
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"VPN Client List Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507_2.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shuyi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in WAVLINK WN536AX6-A V260507_2.0.0. Impacted is the function sub_416d48/sub_41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 6.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 5,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "Missing Authentication",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-01T23:45:16.567Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429622 | WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429622"
},
{
"name": "VDB-429622 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429622/cti"
},
{
"name": "CVE-2026-120278 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120278"
},
{
"name": "Submit #919506 | Wavlink Router Firmware V260507_2.0.0 Exposure of Sensitive Information",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919506"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_vpn_list_info_disclosure.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:36.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120278",
"datePublished": "2026-11-01T23:45:16.567Z",
"dateReserved": "2026-11-01T07:44:05.887Z",
"dateUpdated": "2026-11-01T23:45:16.567Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120277 (GCVE-0-2026-120277)
Vulnerability from cvelistv5 – Published: 2026-11-01 23:30 – Updated: 2026-11-01 23:30
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
Summary
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429621 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429621/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120277 | third-party-advisory |
| https://vuldb.com/submit/919503 | third-party-advisory |
| https://github.com/senxitoyshuyi-ui/HACKALL/blob/… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507_2.0.0
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"WireGuard CLI Group Handler"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507_2.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shuyi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-01T23:30:19.046Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429621 | WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429621"
},
{
"name": "VDB-429621 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429621/cti"
},
{
"name": "CVE-2026-120277 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120277"
},
{
"name": "Submit #919503 | Wavlink Router Firmware V260507_2.0.0 OS Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919503"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_wireguard_cli_group_command_injection.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:31.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120277",
"datePublished": "2026-11-01T23:30:19.046Z",
"dateReserved": "2026-11-01T07:44:01.879Z",
"dateUpdated": "2026-11-01T23:30:19.046Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-120276 (GCVE-0-2026-120276)
Vulnerability from cvelistv5 – Published: 2026-11-01 23:15 – Updated: 2026-11-01 23:15
VLAI
EPSS
VEX
Title
WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection
Summary
A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.
Severity
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/429620 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/429620/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-120276 | third-party-advisory |
| https://vuldb.com/submit/919502 | third-party-advisory |
| https://github.com/senxitoyshuyi-ui/HACKALL/blob/… | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| WAVLINK | WN536AX6-A |
Affected:
V260507_2.0.0
cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:* |
{
"containers": {
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:wavlink:wn536ax6-a:*:*:*:*:*:*:*:*"
],
"modules": [
"Web Management Interface"
],
"product": "WN536AX6-A",
"vendor": "WAVLINK",
"versions": [
{
"status": "affected",
"version": "V260507_2.0.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "reporter",
"value": "shuyi (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 10,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 10,
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-77",
"description": "Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-01T23:15:12.335Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-429620 | WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/429620"
},
{
"name": "VDB-429620 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/429620/cti"
},
{
"name": "CVE-2026-120276 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-120276"
},
{
"name": "Submit #919502 | Wavlink Router Firmware V260507_2.0.0 OS Command Injection",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/919502"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_openvpn_cli_group_command_injection.md"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-11-01T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-11-01T01:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-11-01T08:49:27.000Z",
"value": "VulDB entry last update"
}
],
"title": "WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection",
"x_generator": [
"VulDB PVTS v202611"
]
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-120276",
"datePublished": "2026-11-01T23:15:12.335Z",
"dateReserved": "2026-11-01T07:43:56.426Z",
"dateUpdated": "2026-11-01T23:15:12.335Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}