6 matches found
CVE-2026-113802
Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...
EUVD-2026-105226
Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...
CVE-2026-113802 Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler
Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...
CVE-2026-113802
The Wavlink WL-WN530BE1-A router, running firmware through M30BE1_V251117 , is vulnerable to an OS command injection vulnerability within the sub_23B54 function of the ioos binary. The flaw occurs because the file_id parameter from /protocol.csp?opt=ovpn_file requests with type=del is passed unsa...
CVE-2026-113802 Wavlink WL-WN530BE1-A Unauthenticated OS Command Injection in ioos protocol.csp ovpn_file Handler
Wavlink WL-WN530BE1-A firmware through M30BE1V251117 contains an OS command injection vulnerability in the sub23B54 function of the ioos binary, which passes the unsanitized fileid parameter of /protocol.csp?opt=ovpnfile requests with type=del to popen. A remote unauthenticated attacker can send ...
WAVLINK WL-WN530BE1-A has a command injection vulnerability
The WAVLINK WL-WN530BE1-A M30BE1V251117 and earlier versions have a command injection vulnerability. This vulnerability stems from the ios binary sub23B54 function, which passes the uncleaned fileid parameter of type=del in the request/protocol.csp?opt=ovpnfile to popen. A remote unauthenticated...