CVE-2026-120228

A flaw in the ioos Service of the WAVLINK WN553X1-B V260403_2.0.0 firmware enables remote os command injection . The vulnerability exists within the sub_416D88 function of the /bin/ioos file, where improper neutralization of the group_id/group_name arguments allows for arbitrary command execution...