PT-2026-134900
CVE-2026-120227
·
Published
2026-11-01
·
Updated
2026-11-01
Description by
CVSS 3.1
9.9
CriticalMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
WAVLINK WN701AE version M01AE V260105
Description
The ioos Web Backend component contains a flaw in the
del staticrule function within the static route setting.sh file. A remote attacker can execute arbitrary operating system commands by manipulating the rule name argument. This occurs during the handling of static route deletions.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾