https://feed.craftedsignal.io/products/wn536ax6-a-v260507/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 01:01:37 +0000https://feed.craftedsignal.io/favicon-32x32.pnghttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svghttps://feed.craftedsignal.io/briefs/2026-11-wavlink-wn536ax6a-rce/Mon, 02 Nov 2026 01:01:37 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-wavlink-wn536ax6a-rce/A remote OS command injection vulnerability exists in the WAVLINK WN536AX6-A router, version V260507_2.0.0.<p>A weakness has been identified in the Web Management Interface of the WAVLINK WN536AX6-A (version V260507_2.0.0). The vulnerability resides in function 'sub_416760' of the file '/bin/ioos'. Manipulation of the 'group_name' argument allows for remote OS command injection. Public exploit code is available for this vulnerability. The vendor was contacted early regarding this disclosure.</p> criticaladvisoryRCECommand Injection