CVE-2026-120279 | WAVLINK WN536AX6-A V260507 openvpn_cli /protocol.csp file_id os command injection

November 1, 2026 Yanac

A vulnerability was found in WAVLINK WN536AX6-A V260507 and classified as very critical. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection.

This vulnerability is tracked as CVE-2026-120279. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More