CVE-2026-120279

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120279

The WAVLINK WN536AX6-A router (firmware version V260507 ) is vulnerable to an OS command injection flaw in the openvpn_cli Handler. The vulnerability exists within an unknown function of the /protocol.csp file, where a remote attacker can manipulate the file_id argument to execute arbitrary comma...

EUVD-2026-114912

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120279 WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120279 WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120279: WAVLINK WN536AX6-A: A flaw has been found in WAVLINK WN536AX6-A V260507

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120238

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This affects the function sub4162A8 of the file /bin/ioos of the component ovpnfile Handler. Such manipulation of the argument fileid leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...

EUVD-2026-114880

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This affects the function sub4162A8 of the file /bin/ioos of the component ovpnfile Handler. Such manipulation of the argument fileid leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...

EUVD-2026-114853

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. The affected element is the function sub416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument fileid causes os command injection. It is possible to initiate the attack remotely. The...

CVE-2026-120231 WAVLINK WN553X1-B OpenVPN CLI ioos sub_416568 os command injection

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. The affected element is the function sub416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument fileid causes os command injection. It is possible to initiate the attack remotely. The...

CVE-2026-120231

A vulnerability exists in the WAVLINK WN553X1-B V260403_2.0.0 device within the OpenVPN CLI Handler component. Specifically, the function sub_416568 in the file /bin/ioos fails to properly neutralize the file_id argument, leading to OS command injection . This vulnerability can be exploited remot...

CVE-2026-120229 WAVLINK WN553X1-B ioos sub_416B50 os command injection

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This issue affects the function sub416B50 of the file /bin/ioos. The manipulation of the argument fileid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public...

CVE-2026-120229

A vulnerability exists in WAVLINK WN553X1-B firmware version 260403_2.0.0 . The issue resides in the sub_416B50 function of the /bin/ioos file, where improper neutralization of the file_id argument allows for OS command injection . This vulnerability can be exploited remotely , and public exploit...

CVE-2026-120229 WAVLINK WN553X1-B ioos sub_416B50 os command injection

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This issue affects the function sub416B50 of the file /bin/ioos. The manipulation of the argument fileid leads to os command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public...

WAVLINK WN553X1-B command injection vulnerability

The WAVLINK WN553X1-B V2604032.0.0 version contains a command injection vulnerability. This vulnerability stems from improper handling of the fileid parameter in the sub416568 function within the /bin/ioos file in the OpenVPN CLI Handler component. It may lead to OS command injection, allowing...

CVE-2026-120231: WAVLINK WN553X1-B: A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. The affected element is the function sub416568 of the file /bin/ioos of the component OpenVPN CLI Handler. This manipulation of the argument fileid causes os command injection. It is possible to initiate the attack remotely. The...

CVE-2026-120238: WAVLINK WN553X1-B: A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0

A vulnerability has been found in WAVLINK WN553X1-B 2604032.0.0. This affects the function sub4162A8 of the file /bin/ioos of the component ovpnfile Handler. Such manipulation of the argument fileid leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...

CVE-2024-27630

CVE-2024–27630 Vulnerability Details Overview In Savane v3.12 and prior, a lack of validation on the fileid parameter when deleting a file from /bugs/index.php leads to an Insecure Direct Object Reference IDOR vulnerability that can cause an authenticated administrator of a group with a bug track...

WAVLINK WL-WN530BE1-A has a command injection vulnerability

The WAVLINK WL-WN530BE1-A M30BE1V251117 and earlier versions have a command injection vulnerability. This vulnerability stems from the ios binary sub23B54 function, which passes the uncleaned fileid parameter of type=del in the request/protocol.csp?opt=ovpnfile to popen. A remote unauthenticated...

EUVD-2026-102503

BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed documents by supplying arbitrary fileid values. Attackers can enumerate sequential file ids against GET /api/v1/knowledge/filebbox to...