Wavlink WN701AE 260105 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/wavlink-wn701ae-260105/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioSun, 01 Nov 2026 16:56:55 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgWavlink WN701AE: Remote OS Command Injection in ioos Web Backend (CVE-2026-120230)https://feed.craftedsignal.io/briefs/2026-11-wavlink-wn701ae-rce/Sun, 01 Nov 2026 16:56:55 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-wavlink-wn701ae-rce/A vulnerability in the Wavlink WN701AE (260105) ioos Web Backend allows remote OS command injection via the vlan_name argument in the del_vlan_group function.A vulnerability exists in the ioos Web Backend of Wavlink WN701AE 260105. The del_vlan_group function is susceptible to OS command injection through the vlan_name argument. This attack can be performed remotely, and public exploit code is available. The vendor was notified of this disclosure.

]]>criticaladvisory