CVE-2026-120279

Name of the Vulnerable Software and Affected Versions WAVLINK WN536AX6-A version V260507

Description A flaw in the openvpn cli Handler component allows remote attackers to perform os command injection. This occurs through the manipulation of the file id argument within an unknown function of the '/protocol.csp' endpoint. OS command injection is a technique where an attacker executes arbitrary operating system commands on the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the '/protocol.csp' endpoint to minimize the risk of exploitation.