Threats tagged 'ghsa-ph6g-f82q-hgpw'

CVE-2026-120230 is a critical vulnerability in the WAVLINK WN701AE 260105 device affecting the del_vlan_group function of the ioos Web Backend component. It allows remote attackers with low privileges to perform OS command injection by manipulating the vlan_name argument. The vulnerability has a high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability. Public exploit code exists, but no official patch or remediation information is provided.