{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3awavlinkwn551x3_a/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:wavlink:wn551x3_a:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":10,"id":"CVE-2026-120345"},{"cvss":10,"id":"CVE-2026-120344"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["WN551X3-A (M51X3_V251020-WO-182e965)"],"_cs_severities":["critical"],"_cs_tags":["cve-2026-120344","vulnerability","router","rce"],"_cs_type":"advisory","_cs_vendors":["Wavlink"],"content_html":"\u003cp\u003eCVE-2026-120345 is a remote OS command injection vulnerability in the DNS Resolution Handler (function sub_41a430 in /bin/ioos) of the Wavlink WN551X3-A router (specifically firmware version M51X3_V251020-WO-182e965). The vulnerability can be triggered by sending a maliciously crafted 'data' argument to the DNS resolution function. As the vulnerability is unauthenticated and a proof-of-concept exploit is publicly available, the risk to exposed devices is high.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to execute arbitrary OS commands with the privileges of the DNS resolution service on the affected router. This can lead to full device compromise, persistence, and potential pivot points into internal networks.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately inventory and restrict internet access to Wavlink WN551X3-A routers.\u003c/li\u003e\n\u003cli\u003eImplement network segmentation to isolate these devices from critical infrastructure.\u003c/li\u003e\n\u003cli\u003eMonitor logs for unusual traffic targeting router administrative or DNS management interfaces.\u003c/li\u003e\n\u003cli\u003eContact the vendor regarding availability of firmware updates for the affected model and version.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-02T08:30:13Z","date_published":"2026-11-02T08:30:06Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-120345/","summary":"A critical OS command injection vulnerability in the DNS Resolution Handler of Wavlink WN551X3-A allows unauthenticated remote attackers to execute arbitrary commands via the data argument, with a public proof-of-concept exploit now available.","title":"Wavlink WN551X3-A: Remote OS Command Injection (CVE-2026-120345)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2026-120345/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:wavlink:wn551x3_a:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}