Threats tagged 'ghsa-q3mh-mrr2-xh2h'

A critical vulnerability exists in WAVLINK WN536AX6-A version V260507 in the WireGuard component. The flaw is an OS command injection via the wireguard_cli_group handler function in /protocol.csp, triggered by manipulation of group_id or group_name arguments. This vulnerability can be exploited remotely without authentication and has a maximum CVSS score of 10. Public exploit code has been disclosed, increasing the risk of exploitation. The vendor was notified early, but no patch information is currently available.