Threats tagged 'ghsa-g953-8239-77h5'

A critical vulnerability (CVE-2026-120238) exists in WAVLINK WN553X1-B 260403_2.0.0 in the ovpn_file Handler component. The flaw is an OS command injection via manipulation of the file_id argument in the sub_4162A8 function of /bin/ioos. This vulnerability can be exploited remotely and has a very high CVSS score of 9.9. Public exploit code has been disclosed, but no patch or remediation information is currently available.