Threats tagged 'ghsa-f5q6-27px-wgxf'

A critical security vulnerability (CVE-2026-120277) exists in WAVLINK WN536AX6-A version V260507_2.0.0 affecting the WireGuard CLI Group Handler component. The vulnerability is an OS command injection via the group_name argument in the sub_41a1d8 function of /bin/ioos. This flaw can be exploited remotely without privileges or user interaction. Public exploit code has been disclosed, increasing the risk of exploitation.