CVE-2026-120231

Name of the Vulnerable Software and Affected Versions WAVLINK WN553X1-B version V260403 2.0.0

Description An OS command injection issue exists in the OpenVPN CLI Handler component within the /bin/ioos file. A remote attacker can exploit the sub 416568() function by manipulating the file id argument to execute arbitrary commands on the router, potentially gaining full control of the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the OpenVPN CLI Handler component to minimize the risk of exploitation.