NVD security advisoryCritical
Critical advisory for A flaw
CVE-2026-120279 · Reported 2 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
A flawAffected product
Advisory overview
A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the file /protocol.csp of the component openvpn_cli Handler. Executing a manipulation of the argument file_id can lead to os command injection. The attack can be launched remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure.