CVE-2026-120228
CRITICAL
NVD
CVSS Score
9.9
Severity
CRITICAL
Published
Nov 01, 2026
Vendor
unknown
Description
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.