CVE-2026-0126: Critical severity WC-Radio vulnerability
In WC-Radio, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
WC-Radiofrom your environment.Uninstall WC-Radio from systems where it is not required to eliminate the vulnerable component until a fix is released.
- Configuration
Disable the WC-Radio service/plugin on affected hosts until an official patch or fixed version is available.
WC-Radio service_enabled = false - Compensating control
Restrict network access to systems running WC-Radio using firewall rules, ACLs, or network segmentation; block the service ports and limit management access to trusted IPs only until the vulnerability is remediated.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0126?
The severity of CVE-2026-0126 is critical with a CVSS score of 9.8.
What is CVE-2026-0126 about?
CVE-2026-0126 addresses a possible out of bounds write in WC-Radio, which can lead to remote code execution.
How can CVE-2026-0126 be exploited?
CVE-2026-0126 can be exploited remotely without any user interaction, making it particularly dangerous.
What software is affected by CVE-2026-0126?
CVE-2026-0126 affects WC-Radio on Google Android.
How do I mitigate CVE-2026-0126?
To mitigate CVE-2026-0126, ensure that you apply the latest security updates provided by the software vendor.