Product
A vulnerability in the Wavlink WN701AE (260105) ioos Web Backend allows remote OS command injection via the vlan_name argument in the del_vlan_group function.