CVE-2026-120276 | WAVLINK WN536AX6-A V260507_2.0.0 Web Management Interface /bin/ioos sub_416760 group_name os command injection

November 1, 2026 Yanac

A vulnerability, which was classified as very critical, has been found in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument group_name causes os command injection.

The identification of this vulnerability is CVE-2026-120276. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More