CVE-2026-120228 | WAVLINK WN553X1-B V260403_2.0.0 ioos Service /bin/ioos sub_416D88 group_id/group_name os command injection

October 31, 2026 Yanac

A vulnerability labeled as very critical has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection.

This vulnerability is handled as CVE-2026-120228. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More