CVE-2026-120198 | WAVLINK WL-WN530BE1-A V251117 /protocol.csp con_check_read_finish group_name/IP-FROM command injection

October 31, 2026 Yanac

A vulnerability described as very critical has been identified in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection.

This vulnerability is referenced as CVE-2026-120198. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More