CRITICALCVSS v3.1 10.0Vulnerability
CVE-2026-120345
A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation of the argument data results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
Properties
- Cvss score
- 10
- First seen
- 2026-11-02T06:31:15+00:00
- Last seen
- 2026-11-02T06:31:15+00:00
- Euvd assigner
- VulDB
- Retrieved at
- 2026-11-02T08:49:48+00:00
- Src batch id
- euvd-20261102T073401Z-b17f39
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115068
- Score
- 10
- Euvd base score version
- 4.0
- Fetched at
- 2026-11-02T07:34:20+00:00
- Euvd vendor
- WAVLINK
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- First seen by Signal
- 2026-11-02T07:34:21+00:00
- Euvd base score
- 10
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
- Content hash
- 3044ec1fbab71de4cfeb81cc611e8f9b361722957c66488375f9b77cf336bc7c
- Published at
- 2026-11-02T06:17:43.410
- Last modified
- 2026-11-02T06:17:43.410
- Euvd updated
- 2026-11-02T06:31:15+00:00
- Euvd epss pct
- 0
Related Entities (2)
Explore deeper with Ninja Signal's threat intelligence graph