CVE-2026-120279

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120279

The WAVLINK WN536AX6-A router (firmware version V260507 ) is vulnerable to an OS command injection flaw in the openvpn_cli Handler. The vulnerability exists within an unknown function of the /protocol.csp file, where a remote attacker can manipulate the file_id argument to execute arbitrary comma...

CVE-2026-120279 WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120279 WAVLINK WN536AX6-A openvpn_cli protocol.csp os command injection

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

EUVD-2026-114912

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

CVE-2026-120279: WAVLINK WN536AX6-A: A flaw has been found in WAVLINK WN536AX6-A V260507

A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpncli Handler. Executing a manipulation of the argument fileid can lead to os command injection. The attack can be launched remotely. The exploit has be...

(Pwn2Own) QNAP QHora-322 openvpn_cli user_name SQL Injection Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of QNAP QHora-322 routers. Authentication is not required to exploit this vulnerability, however a specific configuration is necessary. The specific flaw exists within the openvpncli module. The issue...