GHSA-x3j2-x298-hcr4CriticalCVSS 10.0
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function...
🔗 CVE IDs covered (1)
📋 Description
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-120279
- https://github.com/pipiyyb/cve/blob/main/WAVLINK%20WN536AX6-A/WN536AX6-A_file_id.md
- https://vuldb.com/cve/CVE-2026-120279
- https://vuldb.com/submit/919788
- https://vuldb.com/vuln/429623
- https://vuldb.com/vuln/429623/cti
- https://github.com/advisories/GHSA-x3j2-x298-hcr4