WAVLINK WN553X1-B: OS command injection (CVE-2026-120231)
A vulnerability in the OpenVPN CLI Handler component of the WAVLINK WN553X1-B (firmware V260403_2.0.0) allows remote OS command injection via the 'file_id' argument.
CVE search metadata
CVE search record: CVE-2026-120231. Severity: critical. CVSS: 9.9. KEV: no. Product: WN553X1-B (V260403_2.0.0). Brief: WAVLINK WN553X1-B: OS command injection (CVE-2026-120231). Brief link: https://feed.craftedsignal.io/briefs/2026-11-wavlink-rce-df64a306/
Triage facts
Revision 1- Applicability
- WN553X1-B (V260403_2.0.0)
- Evidence
- Unknown
- Severity
- Critical
- Sources
- 1 public source
- Freshness
- Revision 1Nov 1, 16:57 UTC
- Vulnerabilities
- 1 CVE
- Source quality
- A2Roughly even chance
A vulnerability (CVE-2026-120231) has been identified in WAVLINK WN553X1-B firmware version V260403_2.0.0. The flaw is located in the function 'sub_416568' of the file '/bin/ioos' within the OpenVPN CLI Handler component. Manipulation of the 'file_id' argument results in OS command injection. The attack can be initiated remotely. Publicly disclosed exploit code exists and may be utilized. The vendor was contacted early regarding this disclosure.