Threats tagged 'ghsa-mqwg-mjc3-vq36'

A critical vulnerability (CVE-2026-120240) exists in WAVLINK WN553X1-B firmware version V260403_2.0.0, specifically in the WireGuard CLI Group Handler component. The flaw is in the function sub_41A748 within /bin/ioos, where manipulation of the group_id or group_name arguments can lead to OS command injection. This vulnerability is remotely exploitable and has a very high severity score of 9.9. Public exploit code has been disclosed, though no known exploitation in the wild is reported. The vendor was notified early about this issue. No patch or remediation information is currently available.