CVE-2026-120280 | WAVLINK WN536AX6-A V260507 WireGuard /protocol.csp wireguard_cli_group handler group_id/group_name os command injection

SecurityVulns
Yanac

A vulnerability was found in WAVLINK WN536AX6-A V260507. It has been classified as very critical. The impacted element is the function wireguard_cli_group handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument group_id/group_name leads to os command injection.

This vulnerability is listed as CVE-2026-120280. The attack may be initiated remotely. In addition, an exploit is available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More