EUVD-2026-114848

A flaw has been found in WAVLINK WN553X1-B V2604032.0.0. This vulnerability affects the function sub416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument groupid/groupname can lead to os command injection. The attack can be executed remotely. The...

CVE-2026-120228

A flaw in the ioos Service of the WAVLINK WN553X1-B V260403_2.0.0 firmware enables remote os command injection . The vulnerability exists within the sub_416D88 function of the /bin/ioos file, where improper neutralization of the group_id/group_name arguments allows for arbitrary command execution...