GHSA-cfhj-2xf7-r697HighCVSS 9.9
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function...
🔗 CVE IDs covered (1)
📋 Description
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
🔗 References (7)
- https://nvd.nist.gov/vuln/detail/CVE-2026-120228
- https://github.com/senxitoyshuyi-ui/IOT-CVE/blob/main/vulns/WAVLINK%20WN553X1-B%20Router.md
- https://vuldb.com/cve/CVE-2026-120228
- https://vuldb.com/submit/919151
- https://vuldb.com/vuln/429587
- https://vuldb.com/vuln/429587/cti
- https://github.com/advisories/GHSA-cfhj-2xf7-r697