CVE-2026-120345

Name of the Vulnerable Software and Affected Versions WAVLINK WN551X3-A M51X3 V251020-WO-182e965

Description An OS command injection flaw exists in the DNS Resolution Handler component. A remote attacker can trigger this issue by manipulating the data argument passed to the sub 41a430() function within the /bin/ioos file. OS command injection is a flaw that allows an attacker to execute arbitrary operating system commands on the affected device.

Recommendations As a temporary workaround, restrict access to the DNS Resolution Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.