CVE-2026-120230 WAVLINK WN701AE ioos Web Backend del_vlan_group os command injection

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function delvlangroup of the component ioos Web Backend. The manipulation of the argument vlanname results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The...

CVE-2026-120230

The WAVLINK WN701AE (version 260105) is susceptible to an OS command injection vulnerability within the ioos Web Backend component. Specifically, the del_vlan_group function fails to properly sanitize the vlan_name argument, allowing an attacker to execute arbitrary system commands. This attack c...

EUVD-2026-114852

A vulnerability was found in WAVLINK WN701AE 260105. Impacted is the function delvlangroup of the component ioos Web Backend. The manipulation of the argument vlanname results in os command injection. The attack may be performed from remote. The exploit has been made public and could be used. The...

EUVD-2026-114839

A vulnerability was detected in WAVLINK WN701AE M01AEV260105. This affects the function delstaticrule of the file staticroutesetting.sh of the component ioos Web Backend. Performing a manipulation of the argument rulename results in os command injection. Remote exploitation of the attack is...

CVE-2026-120227

The WAVLINK WN701AE M01AE_V260105 is vulnerable to an OS command injection in the ioos Web Backend component. Specifically, the del_staticrule function within the static_route_setting.sh file fails to properly sanitize the rule_name argument, allowing an attacker to execute arbitrary commands. Re...