CVE-2026-120277

The WAVLINK WN536AX6-A router (firmware V260507_2.0.0 ) is vulnerable to an os command injection flaw within the WireGuard CLI Group Handler component. Specifically, the function sub_41a1d8 in the /bin/ioos file fails to properly sanitize the group_name argument, allowing for remote command execu...