CRITICALCVSS v3.1 9.9Vulnerability
CVE-2026-120282
A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This manipulation of the argument mac causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
Properties
- Severity
- CRITICAL
- Nvd fetched at
- 2026-11-02T04:44:10.920480+00:00
- Cvss score
- 9.9
- Cvss severity
- CRITICAL
- Retrieved at
- 2026-11-02T04:46:17+00:00
- Score
- 9.9
- Last source
- NVD
- Cvss version
- 3.1
- Cve id
- CVE-2026-120282
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-11-02T04:40:23+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- Published at
- 2026-11-02T01:17:27.293
- Last modified
- 2026-11-02T01:17:27.293
Related Entities (2)
Explore deeper with Ninja Signal's threat intelligence graph