CVE-2026-120277: falha crítica em WAVLINK WN536AX6-A
WAVLINK WN536AX6-A WireGuard CLI Group ioos sub_41a1d8 os command injection
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
48Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 10epss 2.5%
A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
Produtos afetados
WAVLINK · WN536AX6-APoCs públicas encontradas — 1
cve_referencegithub.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK_WN536AX6-A%20Router/WAVLINK_WN536AX6-A_wireguard_cli_group_command_injection.mdnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — WAVLINK WN536AX6-A
No mesmo produto, das mais perigosas para as menos.
CVE-2026-120276CRITICALWAVLINK WN536AX6-A Web Management ioos sub_416760 os command injectionEPSS 3.2%CVE-2026-120280CRITICALWAVLINK WN536AX6-A WireGuard protocol.csp wireguard_cli_group handler os command injectionEPSS 2.0%CVE-2026-120279CRITICALWAVLINK WN536AX6-A openvpn_cli protocol.csp os command injectionEPSS 2.0%CVE-2026-120282CRITICALWAVLINK WN536AX6-A protocol.csp host_black os command injectionEPSS 1.7%CVE-2026-120281CRITICALWAVLINK WN536AX6-A OpenVPN protocol.csp strcpy stack-based overflowEPSS 0.6%CVE-2026-120278MEDIUMWAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authenticationEPSS 0.4%