CVE-2026-120277 | WAVLINK WN536AX6-A V260507_2.0.0 WireGuard CLI Group /bin/ioos sub_41a1d8 group_name os command injection

November 1, 2026 Yanac

A vulnerability, which was classified as very critical, was found in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection.

This vulnerability is referenced as CVE-2026-120277. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More