CVE-2026-120230 | WAVLINK WN701AE 260105 ioos Web Backend del_vlan_group vlan_name os command injection

October 31, 2026 Yanac

A vulnerability described as very critical has been identified in WAVLINK WN701AE 260105. Impacted is the function del_vlan_group of the component ioos Web Backend. The manipulation of the argument vlan_name results in os command injection.

This vulnerability was named CVE-2026-120230. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More