Threats tagged 'ghsa-9jcp-f9g9-fr7w'

CVE-2026-120239 is a critical remote OS command injection vulnerability in WAVLINK WN553X1-B V260403_2.0.0 affecting the WireGuard CLI Handler component. The flaw arises from improper handling of the argument file_id in the sub_419DA8 function of /bin/ioos, allowing remote attackers to execute arbitrary OS commands. Public exploit code exists, increasing the risk of exploitation. No patch or fixed version information is currently available.