CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-11-01
WAVLINK WN553X1-B Router OpenVPN CLI OS Command Injection Vulnerability (CVE-2026-120231) Security Advisory
[Affected Scope] WAVLINK WN553X1-B router firmware version V260403_2.0.0.
[Impact] An authenticated remote attacker can exploit insufficient input validation in the OpenVPN CLI handler to execute arbitrary OS commands with root privileges.
[Mitigation] Disable the OpenVPN feature if not in use, restrict access to the management interface to trusted IPs, and prepare to apply the official firmware patch.