CVE-2026-120240 | WAVLINK WN553X1-B V260403_2.0.0 WireGuard CLI Group /bin/ioos sub_41A748 group_id/group_name os command injection

October 31, 2026 Yanac

A vulnerability categorized as very critical has been discovered in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os command injection.

This vulnerability appears as CVE-2026-120240. The attack may be performed from remote. In addition, an exploit is available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More