Live › vulnerability › CVE-2026-120198
The WAVLINK WL-WN530BE1-A router firmware V251117 passes the group_name or IP-FROM argument in /protocol.csp to a command without proper checks. A remote attacker can inject operating system commands and run them on the device, and a public exploit exists.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 06:48 UTC. All times on this page are UTC.
Owners of WAVLINK WL-WN530BE1-A routers on firmware V251117 are affected. VulDB says the flaw is reachable remotely without authentication through /protocol.csp and a public proof of concept exists. Anyone whose admin interface is only reachable from a trusted local network is less exposed; other models and firmware versions are not stated to be affected.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| WL-WN530BE1-A | vendor | V251117 | – |
unknown: no fixed firmware published in any source read; check WAVLINK's support page
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-120198")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.