CRITICALCVSS v3.1 10.0Vulnerability

CVE-2026-120344

A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument group_name leads to os command injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.

Properties

Cvss score
10
First seen
2026-11-02T06:31:14+00:00
Last seen
2026-11-02T06:31:14+00:00
Euvd assigner
VulDB
Retrieved at
2026-11-02T08:49:48+00:00
Src batch id
euvd-20261102T073401Z-b17f39
Source url
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115067
Score
10
Euvd base score version
4.0
Fetched at
2026-11-02T07:34:20+00:00
Euvd vendor
WAVLINK
Cvss vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
First seen by Signal
2026-11-02T07:34:21+00:00
Euvd base score
10
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Content hash
f24c93d0b140b9fd5f5b9323e5b267786cf882f0d55c8800cec00d61e702d824
Published at
2026-11-02T05:18:25.450
Last modified
2026-11-02T05:18:25.450
Euvd updated
2026-11-02T06:31:14+00:00
Euvd epss pct
0

Related Entities (2)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-120344 (CVSS v3.1 10) — Ninja Signal Threat Intelligence | Ninja Signal