CVE-2026-120238 | WAVLINK WN553X1-B 260403_2.0.0 ovpn_file /bin/ioos sub_4162A8 file_id os command injection

October 31, 2026 Yanac

A vulnerability was found in WAVLINK WN553X1-B 260403_2.0.0. It has been declared as very critical. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection.

This vulnerability is documented as CVE-2026-120238. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More