CVE-2026-120278

A vulnerability exists in the VPN Client List Handler component of the WAVLINK WN536AX6-A V260507_2.0.0 firmware. Specifically, the functions sub_416d48/sub_41a7c0 within the /bin/ioos file are affected. By manipulating the opt argument, an attacker can bypass authentication. This attack can be i...

CVE-2026-120278 WAVLINK WN536AX6-A VPN Client List ioos sub_41a7c0 missing authentication

A vulnerability was detected in WAVLINK WN536AX6-A V2605072.0.0. Impacted is the function sub416d48/sub41a7c0 of the file /bin/ioos of the component VPN Client List Handler. Performing a manipulation of the argument opt results in missing authentication. The attack can be initiated remotely. The...