CVE-2026-120198
10 CRITICALpublic exploit availablePublished 2026-11-01 · Updated 2026-11-01
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability has been found in WAVLINK WL-WN530BE1-A V251117. Affected is the function con_check_read_finish of the file /protocol.csp. Such manipulation of the argument group_name/IP-FROM leads to command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-74, CWE-77
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-101008PoC
- CRITICALCVE-2026-101187PoC
- CRITICALCVE-2026-101260PoC
- CRITICALCVE-2026-101261PoC
- CRITICALCVE-2026-101262PoC
- CRITICALCVE-2026-101263PoC
- CRITICALCVE-2026-101264PoC
- HIGHCVE-2026-102243PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.