CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2026-1202319.9/CRITICALEPSS 1.7%
2026-11-01

WAVLINK WN553X1-B Router OpenVPN CLI OS Command Injection Vulnerability (CVE-2026-120231) Security Advisory

[Affected Scope] WAVLINK WN553X1-B router firmware version V260403_2.0.0.

[Impact] An authenticated remote attacker can exploit insufficient input validation in the OpenVPN CLI handler to execute arbitrary OS commands with root privileges.

[Mitigation] Disable the OpenVPN feature if not in use, restrict access to the management interface to trusted IPs, and prepare to apply the official firmware patch.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse