NVD security advisoryCritical
Critical advisory for A vulnerability was found in WAVLINK WN5
CVE-2026-120345 · Reported 2 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
A vulnerability was found in WAVLINK WN5Affected product
Advisory overview
A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of the component DNS Resolution Handler. Performing a manipulation of the argument data results in os command injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.