CVE-2026-120279
CRITICAL
NVD
CVSS Score
10
Severity
CRITICAL
Published
Nov 02, 2026
Vendor
unknown
Description
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.