CVE-2026-120280: Command Injection

Published Nov 2, 2026

Updated

A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguardcligroup handler of the file /protocol.csp of the component WireGuard. The manipulation of the argument groupid/groupname leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.

Event History

Nov 2, 2026

CVE Published

via NVD·01:17 AM

Data Sourced

via NVD·01:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are known to be affected?

The affected product and version identified are WAVLINK WN536AX6-A V260507. The vulnerable code is the WireGuard component's wireguard_cli_group handler in /protocol.csp.

Does exploitation require authentication or user interaction?

No. The supplied severity vector indicates network attack access with low complexity, no privileges required, and no user interaction.

What can an attacker do through this issue?

An attacker can manipulate the group_id or group_name arguments to trigger OS command injection. The stated impact includes compromise of confidentiality, integrity, and availability, including subsequent-system impacts.

Is there public exploit information?

Yes. The disclosure states that an exploit has been publicly disclosed and may be used.

CVE-2026-120280: Command Injection

Event History

Frequently Asked Questions

Which deployments are known to be affected?

Does exploitation require authentication or user interaction?

What can an attacker do through this issue?

Is there public exploit information?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are known to be affected?

Does exploitation require authentication or user interaction?

What can an attacker do through this issue?

Is there public exploit information?