CVE-2026-120278 | WAVLINK WN536AX6-A V260507_2.0.0 VPN Client List /bin/ioos sub_416d48/sub_41a7c0 opt missing authentication

SecurityVulns
Yanac

A vulnerability has been found in WAVLINK WN536AX6-A V260507_2.0.0 and classified as problematic. Impacted is the function sub_416d48/sub_41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication.

This vulnerability is identified as CVE-2026-120278. The attack can be initiated remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More