NVD security advisoryCritical
Critical advisory for A flaw
CVE-2026-120228 · Reported 1 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
A flawAffected product
Advisory overview
A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file /bin/ioos of the component ioos Service. Executing a manipulation of the argument group_id/group_name can lead to os command injection. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.