Live › vulnerability › CVE-2026-120240
The WAVLINK WN553X1-B router firmware (V260403_2.0.0) passes the group_id or group_name argument of its WireGuard CLI group handler into an operating system command without proper checks. A remote attacker can use this to run arbitrary commands on the device, and the exploit has been publicly disclosed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-01 19:21 UTC. All times on this page are UTC.
WAVLINK WN553X1-B routers running firmware V260403_2.0.0. The flaw is in the WireGuard CLI group handler (/bin/ioos, sub_41A748), where group_id/group_name reach an OS command. CVSS v4 vector suggests low privileges are needed (PR:L), so a login is likely required, but the sources don't say. Other firmware versions and other WAVLINK models are not listed as affected. Units with the admin interface not reachable from the internet are less exposed.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| WN553X1-B | vendor | V260403_2.0.0 | – |
unknown: no fixed firmware published as of 2026-11-01; WAVLINK's advisory index has no entry for this model
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability was determined in WAVLINK WN553X1-B V260403_2.0.0. This issue affects the function sub_41A748 of the file /bin/ioos of the component WireGuard CLI Group Handler. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure.
This page as .md · .json · in your agent: get_signal("CVE-2026-120240")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.