CVE-2026-120227

The WAVLINK WN701AE M01AE_V260105 is vulnerable to an OS command injection in the ioos Web Backend component. Specifically, the del_staticrule function within the static_route_setting.sh file fails to properly sanitize the rule_name argument, allowing an attacker to execute arbitrary commands. Re...

EUVD-2026-114839

A vulnerability was detected in WAVLINK WN701AE M01AEV260105. This affects the function delstaticrule of the file staticroutesetting.sh of the component ioos Web Backend. Performing a manipulation of the argument rulename results in os command injection. Remote exploitation of the attack is...