CVE-2026-120344

A vulnerability has been found in WAVLINK WN551X3-A M51X3V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument groupname leads to os command injection. The attack may be performed from remote. The...

CVE-2026-120344 WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection

A vulnerability has been found in WAVLINK WN551X3-A M51X3V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument groupname leads to os command injection. The attack may be performed from remote. The...

CVE-2026-120344

A vulnerability exists in the WAVLINK WN551X3-A M51X3_V251020-WO-182e965 device, specifically within the WireGuard CLI Group Handler component. The issue resides in the system function of the /bin/ioos file, where improper handling of the group_name argument allows for OS command injection . This...

CVE-2026-120344 WAVLINK WN551X3-A WireGuard CLI Group ioos system os command injection

A vulnerability has been found in WAVLINK WN551X3-A M51X3V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument groupname leads to os command injection. The attack may be performed from remote. The...

EUVD-2026-115067

A vulnerability has been found in WAVLINK WN551X3-A M51X3V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument groupname leads to os command injection. The attack may be performed from remote. The...

EUVD-2026-114906

A weakness has been identified in WAVLINK WN536AX6-A V2605072.0.0. This vulnerability affects the function sub416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument groupname causes os command injection. It is possible to initiate the attack...

CVE-2026-120344: WAVLINK WN551X3-A: A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965

A vulnerability has been found in WAVLINK WN551X3-A M51X3V251020-WO-182e965. This affects the function system of the file /bin/ioos of the component WireGuard CLI Group Handler. Such manipulation of the argument groupname leads to os command injection. The attack may be performed from remote. The...

CVE-2026-120276 WAVLINK WN536AX6-A Web Management ioos sub_416760 os command injection

A weakness has been identified in WAVLINK WN536AX6-A V2605072.0.0. This vulnerability affects the function sub416760 of the file /bin/ioos of the component Web Management Interface. This manipulation of the argument groupname causes os command injection. It is possible to initiate the attack...

CVE-2026-120276

A CRITICAL OS command injection vulnerability exists in the Web Management Interface of the WAVLINK WN536AX6-A router (version V260507_2.0.0 ). The flaw is located in the sub_416760 function within the /bin/ioos file, where improper handling of the group_name argument allows for remote command ex...

CVE-2026-120240

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. This issue affects the function sub41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack may be performed...

CVE-2026-120228

A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The...

EUVD-2026-114848

A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-120198 WAVLINK WL-WN530BE1-A protocol.csp con_check_read_finish command injection

A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function concheckreadfinish of the file /protocol.csp. Such manipulation of the argument groupname/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

WAVLINK WL-WN530BE1-A input validation error vulnerability

The WAVLINK WL-WN530BE1-A V251117 version contains a security vulnerability. This vulnerability stems from improper handling of the groupname/IP-FROM parameter in the concheckreadfinish function within the file /protocol.csp. It may lead to command injection, allowing attackers to launch remote...

CVE-2026-120240: WAVLINK WN553X1-B: A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0

A vulnerability was determined in WAVLINK WN553X1-B V2604032.0.0. This issue affects the function sub41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack may be performed...

CVE-2026-120228: WAVLINK WN553X1-B: A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0

A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The...

sgl-project SGLang Resource Management Error Vulnerability

The SGLang version 0.5.19 and earlier have a resource management vulnerability. This vulnerability stems from an error in the WeightExporter.sendweightstoremoteinstance function in the Weight Exporter component’s file python/sglang/srt/modelexecutor/modelrunnercomponents/weightexporter.py. The...

CVE-2026-89243

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroupname that fails to sanitize groupname input. Administrators with canAdminUserGroups permission can inject malicious HTML and JavaScript that executes in...

EUVD-2026-76055

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroupname that fails to sanitize groupname input. Administrators with canAdminUserGroups permission can inject malicious HTML and JavaScript that executes in...

CVE-2026-89243: Improper Neutralization of Input During Web Page Generation

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in UserGroups::setGroupname that fails to sanitize groupname input. Administrators with canAdminUserGroups permission can inject malicious HTML and JavaScript that executes in...