CVE-2026-120228 — Vulnerability intelligence
—
Published:
- CVSS
- 8.6
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.