CRITICALCVSS v3.1 9.9Vulnerability
CVE-2026-120238
A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
Properties
- Cvss score
- 9.9
- First seen
- 2026-11-01T18:30:25+00:00
- Last seen
- 2026-11-01T18:30:25+00:00
- Euvd assigner
- VulDB
- Retrieved at
- 2026-11-01T20:39:12+00:00
- Src batch id
- euvd-20261101T193401Z-7997d9
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114880
- Score
- 9.9
- Euvd base score version
- 4.0
- Fetched at
- 2026-11-01T19:34:20+00:00
- Euvd vendor
- WAVLINK
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-11-01T19:34:21+00:00
- Euvd base score
- 9.4
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Content hash
- ab25d29efa442d995c81bcce8f00f5f3b0c0a11a43e1ae88fe828707fb51c1c8
- Published at
- 2026-11-01T18:17:13.720
- Last modified
- 2026-11-01T18:17:13.720
- Euvd updated
- 2026-11-01T18:30:25+00:00
- Euvd epss pct
- 0
Related Entities (2)
Explore deeper with Ninja Signal's threat intelligence graph