166 Ergebnisse
9.9Kritisch
CVE-2026-120238

WAVLINK WN553X1-B ovpn_file ioos sub_4162A8 os command injection

WAVLINK WN553X1-B

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This affects the function sub_4162A8 of the file /bin/ioos of the component ovpn_file Handler. Such manipulation of the argument file_id leads to os command injection. The attack can be execute…

1.7%EPSS
9.1Kritisch
CVE-2026-120229

WAVLINK WN553X1-B ioos sub_416B50 os command injection

WAVLINK WN553X1-B

A vulnerability has been found in WAVLINK WN553X1-B 260403_2.0.0. This issue affects the function sub_416B50 of the file /bin/ioos. The manipulation of the argument file_id leads to os command injection. The attack is possible to be carried out remotely. The …

2.8%EPSS
9.9Kritisch
CVE-2026-120228

WAVLINK WN553X1-B ioos Service sub_416D88 os command injection

WAVLINK WN553X1-B

A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. Th…

1.7%EPSS
9.9Kritisch
CVE-2026-120197

WAVLINK WL-WN530HG4B wapi.cgi port_forward os command injection

WAVLINK WL-WN530HG4B

A flaw has been found in WAVLINK WL-WN530HG4B M_V260724. This impacts the function port_forward of the file /cgi-bin/wapi.cgi. This manipulation of the argument Name causes os command injection. It is possible to initiate the attack remotely. The exploit has …

1.7%EPSS
9.9Kritisch
CVE-2026-120196

WAVLINK WN579X3-D wapi.cgi port_forward os command injection

WAVLINK WN579X3-D

A vulnerability was detected in WAVLINK WN579X3-D V250402. This affects the function port_forward of the file /cgi-bin/wapi.cgi. The manipulation of the argument Name results in os command injection. The attack may be performed from remote. The exploit is now…

1.7%EPSS
10.0Kritisch
CVE-2026-110958

Wavlink WN530HG4B api.cgi heap-based overflow

Wavlink WN530HG4B

A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724. The impacted element is an unknown function of the file api.cgi. The manipulation results in heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been made pu…

1.0%EPSS
10.0Kritisch
CVE-2026-109110

Wavlink WL-WN592AX6 wmapd system os command injection

Wavlink WL-WN592AX6

A flaw has been found in Wavlink WL-WN592AX6 250422. This issue affects the function system of the component wmapd Daemon. Executing a manipulation can lead to os command injection. It is possible to launch the attack remotely. The exploit has been published …

2.0%EPSS