CVE-2026-120231 | WAVLINK WN553X1-B V260403_2.0.0 OpenVPN CLI /bin/ioos sub_416568 file_id os command injection

October 31, 2026 Yanac

A vulnerability classified as very critical has been found in WAVLINK WN553X1-B V260403_2.0.0. The affected element is the function sub_416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument file_id causes os command injection.

The identification of this vulnerability is CVE-2026-120231. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More