EUVD Vulnerability Catalog
EUVD-2026-114881
Severity: CRITICAL
Base Score: 9.4
CVSS Version: 4.0
Vulnerability Description
A vulnerability was found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_419DA8 of the file /bin/ioos of the component WireGuard CLI Handler. Performing a manipulation of the argument file_id results in os command injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure.
CVSS Vector Analysis
Below is the complete, human-readable breakdown of the CVSS metric string: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P
▪
Attack Vector (AV): Network
▪
Attack Complexity (AC): Low
▪
Attack Requirements (AT): None
▪
Privileges Required (PR): Low
▪
User Interaction (UI): None
▪
Vulnerability Confidentiality Impact (VC): High
▪
Vulnerability Integrity Impact (VI): High
▪
Vulnerability Availability Impact (VA): High
▪
Subsequent Confidentiality Impact (SC): High
▪
Subsequent Integrity Impact (SI): High
▪
Subsequent Availability Impact (SA): High
▪
E: P
Affected Vendors & Systems
Vendor
WAVLINK
References & Advisory Links
- https://vuldb.com/vuln/429598
- https://vuldb.com/vuln/429598/cti
- https://vuldb.com/cve/CVE-2026-120239
- https://vuldb.com/submit/919250
- https://github.com/senxitoyshuyi-ui/HACKALL/blob/main/WAVLINK%20WN553X1-B%20Router/WAVLINK_WN553X1-B_wireguard_cli_command_injection.md
- https://nvd.nist.gov/vuln/detail/CVE-2026-120239
Metadata Profile
Database Authority
European Union Agency for Cybersecurity (ENISA) EUVD
Assigner
VulDB
EPSS Probability
0
Known Aliases
GHSA-9jcp-f9g9-fr7w
CVE-2026-120239
Published On
2026-11-01
Last Updated
2026-11-01